Managed to do bad things to the bunker, not quite sure what.
First udev was running amok due to not getting read rights on inotify, relabel solved that (for some reason inotify was unlabelled, mmhmz) this also had the sideffect of spamming the avc log with heaps of junk, so it filled /var/log, ach well. erase and move on.
Next, reboot. in secured mode the root account gets errors and has.. expired? Need to look more at this, same seems to be for some other accounts, most probably a