Comment 7 for bug 1815699

@Philipp Huebner

I personally use the following systemd service override:

```
[Service]
PrivateTmp=false
ProtectHome=false
ProtectSystem=false
```

Speaking of detection: `systemd-detect-virt` in an lxd/lxc container returns `lxc\n`