Comment 5 for bug 1950176

also, the containers that need /dev:rw mounted, would need to be started as -v /dev/null:/dev/pts/ptmx:ro -v /dev/null:/dev/ptmx:ro

:ro would indicate with a failure logged, if something tries to use pseudoterminal there (it really shouldn't)