Docker inside LXCs

[runleveldev]

We need to set the following settings for LXC containers on creation so docker/podman will word

features: nesting=1,keyctl=1,fuse=1
lxc.apparmor.profile: unconfined

[runleveldev]

Fixed in #154 and #156