Avoid trouble when using lxc-console
Copy default lxc.cgroup.devices.allow from ubuntu template