So it turns out that “lxc-device -n xxx add /dev/fuse” must do more than just running mknod in the container - the created device node looks just the same, but this time it works.
How then do I create it at boot time? lxc.hook.autodev seems a likely candidate, but I can’t find any examples of how it works.
Cheers,
Richard