Add shell lxc container which is useful for working inside containers and generally seeing what they can see.
Also add hook script to ensure that tun device exists for router.