LXC simplifications

I've tried to simplify how commands are executed inside the container, but please verify that this still works. The changes here will require Jenkins to have `sudo` permissions to run `lxc-attach`. The shell quoting should be at least as good as it was before, but let me know if I've broken something.