lxc.idmap = u 0 11500000 500000
lxc.idmap = g 0 11500000 500000

lxc.include = /usr/share/lxc/config/nesting.conf
lxc.apparmor.allow_nesting = 1
lxc.seccomp.allow_nesting = 1
lxc.mount.auto = cgroup:rw:force