Comment # 1 on bug 1228274 from Rein Fernhout

lxc-create also requires wget to download image files

I think lxc-net can technically work without dnsmasq but dhcp is used with most
configurations.

I guess it makes sense to have the lxc package suggest wget, iptables and
dnsmasq?

I quickly installed and launched an archlinux container and I did not
experience issues with not having apparmor-profiles. The default configuration
shipped by lxc and distrobuilder doesn't have apparmor support enabled. You
probably have apparmor support enabled in your configuratoin.