lxc profile set $PROFILE raw.lxc \
        "lxc.aa_profile=unconfined
         lxc.cgroup.devices.allow = b 7:* rwm
         lxc.cgroup.devices.allow = c 10:237 rwm"