root/vm: links for tls