we haven't depended on pipework for a while
...and docker-ns (though we still leave the script around since it's handy for debugging), and arping (as I have yet to encounter a situation where it was required)