# Default unified cgroup configuration # Reset cgroupv2: lxc.cgroup2.devices.deny = lxc.cgroup2.devices.allow = # For unprivileged contaienrs we make it a deny-list: lxc.cgroup2.devices.allow = a