The variable JoinControllers in /etc/systemd/system.cofn should include net_cls. Otherwise when newer kernel is used in trusty, users will not by default be able to use unprivileged containers.
The variable JoinControllers in /etc/systemd/ system. cofn should include net_cls. Otherwise when newer kernel is used in trusty, users will not by default be able to use unprivileged containers.