ignore net none
private-etc resolv.conf,ca-certificates,ssl