腹黒い茶 says to OKTW Network lxc config 要 append 這些才能正常用 lxc.apparmor.profile: unconfined lxc.cgroup.devices.allow: a lxc.cap.drop: