Retrieve a domain list only after obtaining global lock. Otherwise an outdated list may be used, when a domain was introduced in the meantime (starting a new domain is done with global lock held), leading to #1389. QubesOS/qubes-issues#1389
root-cow.img