main: Fix systemd capabilities

Signed-off-by: Thomas Hipp <thomas.hipp@canonical.com>

distrobuilder/main.go

@@ -63,6 +63,7 @@ import (
 	"strings"
 	"time"
 
+	lxd "github.com/lxc/lxd/shared"
 	"github.com/pkg/errors"
 	"github.com/spf13/cobra"
 	"go.uber.org/zap"
@@ -441,3 +442,18 @@ func getDefinition(fname string, options []string) (*shared.Definition, error) {
 
 	return &def, nil
 }
+
+func fixCapabilities() {
+	// Check if container has systemd
+	if !lxd.PathExists("/etc/systemd") {
+		return
+	}
+
+	os.MkdirAll("/etc/systemd/system/service.d", 0755)
+
+	content := `[Service]
+ProtectProc=default
+ProtectControlGroups=no
+`
+	ioutil.WriteFile("/etc/systemd/system/service.d/lxc.conf", []byte(content), 0644)
+}

distrobuilder/main_lxc.go

@@ -152,6 +152,8 @@ func (c *cmdLXC) run(cmd *cobra.Command, args []string, overlayDir string) error
 		}
 	}
 
+	fixCapabilities()
+
 	exitChroot()
 
 	err = img.Build()

distrobuilder/main_lxd.go

@@ -315,6 +315,10 @@ func (c *cmdLXD) run(cmd *cobra.Command, args []string, overlayDir string) error
 		}
 	}
 
+	if !c.flagVM {
+		fixCapabilities()
+	}
+
 	exitChroot()
 
 	// Unmount VM directory and loop device before creating the image.