diff --git a/ct/ubuntu.sh b/ct/ubuntu.sh
index 010b9738..538c93a4 100644
--- a/ct/ubuntu.sh
+++ b/ct/ubuntu.sh
@@ -145,6 +145,11 @@ STORAGE_TYPE=$(pvesm status -storage $(pct config $CTID | grep rootfs | awk -F "
 if [ "$STORAGE_TYPE" == "zfspool" ]; then
   warn "Some addons may not work due to ZFS not supporting 'fallocate'."
 fi
+LXC_CONFIG=/etc/pve/lxc/${CTID}.conf
+cat <<EOF >> $LXC_CONFIG
+lxc.cgroup2.devices.allow: a
+lxc.cap.drop:
+EOF
 
 echo -en "${GN} Starting LXC Container... "
 pct start $CTID