Problem with disable apparmor for single container

[stgraber (Stéphane Graber)]

You should stay away from the lxc.apparmor.profile=unconfined and instead use raw.apparmor to allow anything which gets blocked by the stock profile.