Puppet now ensures that LXC has an AppArmor profile set to complain instead of enforce. This allows privileged Docker containers to run without AppArmor getting in the way.
Removed DNS as it seems to not always solve the problem. Added fix for LXC installation complaining about not finding Upstart.