diff --git a/TODO b/TODO
index c99905f060..7f5db20da4 100644
--- a/TODO
+++ b/TODO
@@ -31,6 +31,11 @@ External:
 
 Features:
 
+* nspawn: emulate /dev/kmsg using CUSE and turn off the syslog syscall
+  with seccomp. That should provide us with a useful log buffer that
+  systemd can log to during early boot, and disconnect container logs
+  from the kernel's logs.
+
 * networkd/udev: implement SR_IOV configuration in .link files:
   http://lists.freedesktop.org/archives/systemd-devel/2015-January/027451.html