This is a UID/GID mapping issue, not a regular permissions problem.
In an unprivileged LXC container, the user ubuntu (UID 1000) is mapped to a different UID on the host (often 101000). If the ownership on the host doesn’t match that mapping, files show up as nobody:nogroup in the container.
You can either:
Option 1 – Let LXC handle the mapping automatically (recommended):