[Exec]
Boot=true
Capability=CAP_NET_ADMIN
PrivateUsers=false

[Files]
Bind=/etc/systemd/nspawn/20-machines-profile.sh:/etc/profile.d/20-machines-profile.sh
BindReadOnly=/tmp/.X11-unix

[Network]
VirtualEthernet=false