[Exec] Boot=true Capability=CAP_NET_ADMIN PrivateUsers=pick [Files] Bind=/etc/systemd/nspawn/20-machines-profile.sh:/etc/profile.d/20-machines-profile.sh BindReadOnly=/tmp/.X11-unix BindReadOnly=/etc/systemd/nspawn/10-macvlan.network:/etc/systemd/network/10-macvlan.network [Network] MACVLAN=bond1