this enables unprivileged lxc containers on the vanilla kernel

full instructions in README.alpine