In my testing I needed to make one additional change to the base lxc apparmor profile, and I've replied to the upstream bug report asking for feedback, since I'm not an apparmor expert. Once I get an ACK on that I'll update the lxc package for Debian.
Mathias
signature.asc
Description: This is a digitally signed message part