Acquire a lock file. The same as opkg uses, to prevent collision with
that one as well (if it was just us, the journal would be enough to
prevent concurrent access).