there might still be some bugs to work out here. this produces a workable image, but with some uncertainty around that swapfile (the first attempt had /swapfile living on a tmpfs).
