base: consolidate sysctl for openrc/systemd/lxc
shorewall: fix systemd unit for lxc containers