I haven't looked at the whole thing but I looked at the upgrade LXC script and it just called the respective upgrade/update command inside the shell. I feel like this might be somewhat dangerous as things might need manual intervention?