lxc.net.0.type = veth
lxc.net.0.link = virbr0
lxc.net.0.flags = up
lxc.apparmor.profile = unconfined
lxc.idmap = u 0 100000 65536
lxc.idmap = g 0 100000 65536
# fix when possible
#lxc.apparmor.profile = generated
#lxc.apparmor.allow_nesting = 1