Seccomp configuration not loaded by LXC

If it’s a manually built LXC, you’ll want to make sure you passed --enable-seccomp.

A trace level log of lxc-start would also show you what’s going on.