Wanting to run things like Docker inside the container will probably be a pretty common use case. This can easily be supported by allowing container nesting. `lxc config set container security.nesting true` Should be a config setting.