lxc config set NAME security.syscalls.intercept.mknod true
lxc config set NAME security.syscalls.intercept.setxattr true
lxc restart NAME
lxc config set NAME security.syscalls.intercept.mknod true
lxc config set NAME security.syscalls.intercept.setxattr true
lxc restart NAME