The virtio ISO is obviously required for stock Windows ISOs. Some remastered Windows ISOs may not require it but does not hurt to include it when you boot up.
I guess this is necessary for installation: lxc config set win10 raw.apparmor "/home/** rwk,"
Am I assuming correctly that this refers to the path on the host?
And can you set it directly to the .iso files path?
And should one unset this, after installation?