I've added code to docker to handle / being shared, since fedora works like that. It works by detecting a shared / and the starting lxc-start in its own namespace where we've mounted / as rslave. See the code here:
https://github.com/dotcloud/docker/blob/master/container.go#L673 This works out of the box on fedora. Strange that it doesn't work on debian.
