rudder-relayd.service: Failed at step NAMESPACE - Permission denied
Solution 1:
I think you should enable nesting mode with lxc on the host, I think with this command:
lxc config set <id> security.nesting true
Solution 2:
You could try to disable hardening options relying on namespaces, namely ProtectSystem, ReadWritePaths and PrivateTmp.