I installed lxd into Ubunti Focal on rock pi 4A. I got the latest image from here. I only installed snap and lxd from snap.
When I create an unprivileged container it cannot use raw sockets. Lxd developres suggest for a similar issue with a custom Nvidia Tegra kernel that:
what could be causing the issue and he downloaded the Tegra custom kernel source and tracked the issue down to what appears to be a bug that has been introduced into the custom kernel. When opening raw sockets, rather than checking the namespace capabilities (which it does in the vanilla kernel) it is checking the global capabilities in the root namespace. And as the container is running unprivileged it does not have global CAP_NET_RAW capability and fails.
See discussion here.
Could it be a case for rock custom kernel too?