lxc.seccomp.profile = /opt/appsupport/etc/aas-seccomp-profile
lxc.seccomp.allow_nesting = 1
lxc.cap.drop = linux_immutable ipc_owner sys_module sys_rawio sys_pacct sys_boot sys_time lease audit_write setfcap mac_override mac_admin audit_read
lxc.idmap = u 0 500000 99999
lxc.idmap = g 0 500000 99999
lxc.idmap = u 100000 100000 1
lxc.idmap = g 100000 100000 1
lxc.idmap = u 100001 600001 99999
lxc.idmap = g 100001 600001 99999

