How to run an unresolved lxc container in Arch Linux

I'm trying to create a container without privileges, I went to

Error: Error in initializing cgroup driver / PAM could not be opened pam_cgfs.so

It went down from lxc to 3.0.1 as suggested in doc https://wiki.archlinux.org/index.php/Linux_Containers, but now lxc does not even say what is wrong:

> lxc-create -l DEBUG -n test2345 -t download - --dist archlinux --release current --arch amd64
Error creating the test2345 container

Container record:

> cat /home/user/.local/share/lxc/test2345/test2345.log
lxc-create test2345 20181121173634.835 INFO lxc_confile - confile.c: set_config_idmaps: 1666 - Read map of uid: enter u nsid 0 hostid 100000 range 65536
lxc-create test2345 20181121173634.835 INFO lxc_confile - confile.c: set_config_idmaps: 1666 - Read map of uid: type g nsid 0 hostid 100000 range 65536
lxc-create test2345 20181121173634.835 DEBUG lxc_conf - conf.c: chown_mapped_root: 3086 - trying to chown "/home/user/.local/share/lxc/test2345" to 1000

configs

> cat / etc / subuid
user: 100000: 65536

> cat / etc / subgid
user: 100000: 65536

> cat /home/user/.config/lxc/default.conf
lxc.idmap = u 0 100000 65536
lxc.idmap = g 0 100000 65536