generic lxc container systemd service