diff --git a/templates/lxc-openstack.conf.j2 b/templates/lxc-openstack.conf.j2
index 3e6dffe3..4fd83c86 100644
--- a/templates/lxc-openstack.conf.j2
+++ b/templates/lxc-openstack.conf.j2
@@ -1,5 +1,7 @@
 # {{ ansible_managed }}
 
+lxc.apparmor.profile = generated
+lxc.apparmor.allow_nesting = 1
 lxc.start.auto = 1
 lxc.start.delay = 15
 lxc.group = onboot