(chore) support unprivileged container

- use lxc execute to read/write files.
- options can have io objects, which ...
Why are you providing an empty options hash here instead of passing the options?