Some LXC 

* additional lxc.cgroup.devices from ubuntu template
* avoid trouble when using lxc-console