lxc.net.0.type = veth
lxc.net.0.link = {{ bridge }}
lxc.net.0.flags = up
{{! 'thirdoctet'	string => format( "%02x", nth( splitstring( $(cfg[addr]), '\.', 4 ), 2 ) ); }}
lxc.net.0.hwaddr = 00:16:3e:{{ thirdoctet }}:xx:xx

lxc.net.0.script.up = /usr/local/bin/lxc-hooks
lxc.net.0.script.down = /usr/local/bin/lxc-hooks

#lxc.apparmor.profile=unconfined
lxc.apparmor.profile = generated
lxc.apparmor.allow_nesting = 1

lxc.hook.version = 1
lxc.hook.pre-start = /usr/local/bin/lxc-hooks