Ok, this is happening because lxc, for privileged containers, bind-mounts /proc/sys and /proc/sys/net onto themselves. This prevents later unprivileged mounting of /proc.
Ok, this is happening because lxc, for privileged containers, bind-mounts /proc/sys and /proc/sys/net onto themselves. This prevents later unprivileged mounting of /proc.