I found the issue - in the generated lxc config for the containers having that issue "hwaddr" appears before any other lxc.network.* setting, which causes lxc to refuse to parse the config.
After consulting both hallyn and the lxc project source, the simplest solution is to ensure in all generated lxc config files any lxc.network.* lines appear *after* the (first or only) lxc.network.type = ... line. I'm working on a fix now.
I found the issue - in the generated lxc config for the containers having that issue "hwaddr" appears before any other lxc.network.* setting, which causes lxc to refuse to parse the config.
After consulting both hallyn and the lxc project source, the simplest solution is to ensure in all generated lxc config files any lxc.network.* lines appear *after* the (first or only) lxc.network.type = ... line. I'm working on a fix now.