- Sanitize setuid binaries and any other paths to root - Write a default configuration - Optionally copy in any drivers from the host system - NVIDIA - OFED - Check permissions