# AVC apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-100_</var/lib/lxc>" name="/run/systemd/unit-root/" pid=16153 comm="(ionclean)" srcname="/" flags="rw,

```shell
nano /etc/apparmor.d/lxc/lxc-default-cgns
```

> mount fstype=nfs\*,  
> mount fstype=rpc\_pipefs,  
> mount options=(rw, nosuid, noexec, remount, relatime, ro, bind, rbind),

```shell
systemctl reload apparmor
```