"Could not check if docker-default AppArmor profile was loaded: open /sys/kernel/security/apparmor/profiles: permission denied"

You’ll need to look up apparmor namespacing and set that up.
LXD does it for you but on LXC, I think you’re mostly on your own, so would need to manually create the namespace and then specify it with lxc.apparmor.profile using the weird namespace syntax used by apparmor.