> > maybe Setgid www-data on lxc hook ? > > no idea if that works - we need to test. Or is there another/earlier hook > where we have full permissions? maybe the pre-start hook is better for our needs?