Hi Salvatore, you missed the point: needrestart must *not* restart LXC containers, even if it is not a false positive. There is a high risk for data corruption.
needrestart doesn't have sufficient information how the container was started in the first place. This is unlike docker, for example. Regards Harri