#Pripojime tmpfs
lxc.mount.entry = tmpfs tmp tmpfs defaults,nosuid,noexec,nodev,size=256M

#Omezime pocet procesu/threadu
lxc.cgroup.pids.max = 600

#Povolime tun/tap (openvpn)
lxc.cgroup.devices.allow = c 10:200 rwm
lxc.hook.autodev = sh -c "modprobe tun; cd ${LXC_ROOTFS_MOUNT}/dev; mkdir net; mknod net/tun c 10 200; chmod 0666 net/tun"

#Povolime FUSE (pozor, ma problemy s lxc-freeze, takze zadny snapshoty, zalohy, migrace, replikace, atd...)
lxc.hook.autodev: sh -c "mknod -m 0666 ${LXC_ROOTFS_MOUNT}/dev/fuse c 10 229"