A kernel.org update

It is a snaplock compliance volume on the Netapp storage appliance. While not true write-once media (anyone with physical access to the netapp would be able to pull drives out and delete the data, for example), it gets us most of the way there without costing a full arm and leg.