lxdui: FORBIDDEN Create container: Create LXC container: Invalid devices: Detect root disk device: No root device could be found

fresh ubuntu 18.04 cloud instance - LXDUI install no errors - lxd init default values - instance creation error can create create storage pool also can create CLI instances without device specification (which LXDUI does not show) when create instance via LXDUI with ubuntu xenial or bionic this error: FORBIDDEN Create container: Create LXC container: Invalid devices: Detect root disk device: No root device could be found

 lxd init
Would you like to use LXD clustering? (yes/no) [default=no]:
Do you want to configure a new storage pool? (yes/no) [default=yes]:
Name of the new storage pool [default=default]:
Name of the storage backend to use (btrfs, dir, lvm, zfs) [default=zfs]:
Create a new ZFS pool? (yes/no) [default=yes]:
Would you like to use an existing block device? (yes/no) [default=no]:
Size in GB of the new loop device (1GB minimum) [default=15GB]:
Would you like to connect to a MAAS server? (yes/no) [default=no]:
Would you like to create a new local network bridge? (yes/no) [default=yes]:
What should the new bridge be called? [default=lxdbr0]:
What IPv4 address should be used? (CIDR subnet notation, “auto” or “none”) [defa                                                   ult=auto]:
What IPv6 address should be used? (CIDR subnet notation, “auto” or “none”) [defa                                                   ult=auto]:
Would you like LXD to be available over the network? (yes/no) [default=no]: yes
Address to bind LXD to (not including port) [default=all]:
Port to bind LXD to [default=8443]:
Trust password for new clients:
Again:
Would you like stale cached images to be updated automatically? (yes/no) [defaul                                                   t=yes]
Would you like a YAML "lxd init" preseed to be printed? (yes/no) [default=no]:

snap list
Name  Version  Rev   Tracking  Publisher   Notes
core  16-2.37  6259  stable    canonical✓  core
lxd   3.9      9919  stable    canonical✓  -

lxc storage list
+---------+-------------+--------+--------------------------------+---------+
|  NAME   | DESCRIPTION | DRIVER |             SOURCE             | USED BY |
+---------+-------------+--------+--------------------------------+---------+
| default |             | zfs    | /var/lib/lxd/disks/default.img | 3       |
+---------+-------------+--------+--------------------------------+---------+

 lxc info
config:
  core.https_address: '[::]:8443'
  core.trust_password: true
api_extensions:
- storage_zfs_remove_snapshots
- container_host_shutdown_timeout
- container_stop_priority
- container_syscall_filtering
- auth_pki
- container_last_used_at
- etag
- patch
- usb_devices
- https_allowed_credentials
- image_compression_algorithm
- directory_manipulation
- container_cpu_time
- storage_zfs_use_refquota
- storage_lvm_mount_options
- network
- profile_usedby
- container_push
- container_exec_recording
- certificate_update
- container_exec_signal_handling
- gpu_devices
- container_image_properties
- migration_progress
- id_map
- network_firewall_filtering
- network_routes
- storage
- file_delete
- file_append
- network_dhcp_expiry
- storage_lvm_vg_rename
- storage_lvm_thinpool_rename
- network_vlan
- image_create_aliases
- container_stateless_copy
- container_only_migration
- storage_zfs_clone_copy
- unix_device_rename
- storage_lvm_use_thinpool
- storage_rsync_bwlimit
- network_vxlan_interface
- storage_btrfs_mount_options
- entity_description
- image_force_refresh
- storage_lvm_lv_resizing
- id_map_base
- file_symlinks
- container_push_target
- network_vlan_physical
- storage_images_delete
- container_edit_metadata
- container_snapshot_stateful_migration
- storage_driver_ceph
- storage_ceph_user_name
- resource_limits
- storage_volatile_initial_source
- storage_ceph_force_osd_reuse
- storage_block_filesystem_btrfs
- resources
- kernel_limits
- storage_api_volume_rename
- macaroon_authentication
- network_sriov
- console
- restrict_devlxd
- migration_pre_copy
- infiniband
- maas_network
- devlxd_events
- proxy
- network_dhcp_gateway
- file_get_symlink
- network_leases
- unix_device_hotplug
- storage_api_local_volume_handling
- operation_description
- clustering
- event_lifecycle
- storage_api_remote_volume_handling
- nvidia_runtime
- candid_authentication
- candid_config
- candid_config_key
- usb_optional_vendorid
api_status: stable
api_version: "1.0"
auth: trusted
public: false
auth_methods:
- tls
environment:
  addresses:
  - 172.16.XXXX:8443
  - '[2602:ffb6:4:2a5cXXXX]:8443'
  - 10.253XXX:8443
  - '[fd42:a979:e338:9260::1]:8443'
  architectures:
  - x86_64
  - i686
  certificate: |
    -----BEGIN CERTIFICATE-----
    MIIFWDCCA0CgAwIBAgIQI0Zt9eZ96GaTtrVXCJCnIjANBgkqhkiG9w0BAQsFADA2
    MRwwGgYDVQQKExNsaW51eGNvbnRhaW5lcnMub3JnMRYwFAYDVQQDDA1yb290QGx1
    bmEtbHhjMB4XDTE5MDEyOTE5MTkxOVoXDTI5MDEyNjE5MTkxOVowNjEcMBoGA1UE
    ChMTbGludXhjb250YWluZXJzLm9yZzEWMBQGA1UEAwwNcm9vdEBsdW5hLWx4YzCC
    AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOJHA3fMZjsW6S1SZ/uhJsHM
    2cWBsY+d4OA1PM0c9UcCgg/jM07U9QO1AMZ6PJyca4paPQ9UWvDC9GVsrmAtzgEg
    oeCxy2BgeVDUUYpE7+Z+J4F+UsX7AHFZvCl3n8cX9ZgYvB3NdBD2IbQbAzFYlBAN
    AHImZZ8YqFua78WpCSM6+IdEwr9PhxJPcp2LjMazVSbwkDSWHXtq+6ss01ebvI9W
    6cVBlFVrsdoLYJy8wblKdWpN4u1OEoE4yqnDq5pLSQa71BJS92ytwUTB0bmkoz5z
    5Ff3woZj0xEo3fqvZbBe7sRce1W/9HZLLn+SsT2uhZYHPq7w5V0uvp9HHBoIlRpS
    CJUMrmYSLtGaBWHkLuMLL6Y4nRE0xbKvNh5PdjOncce0SOGOjwUML36kXLa8sahY
    IvuNfvaov1A9/nV8M3sCHksox7MsFbZA8GPEFhTX3aGBzsh9+5gPho0zuEO+QhGn
    uAPkec6pDo3FKG+O08Nt6dQGTwkzb+oVBOevYQcvMEwt83S9r2xOgxOLaXvFf5Wb
    ENliq1GOBtt1YWOCMNZkFrC/XFqMV9s2PHrzDtysJ3bwULS25NdHCavuOwiuZ5kF
    6ooGtM2cwapEse4ECtILiWOMzQnU4LwPWn0GmdDdpirym3Rl4RQDbonwAEW1UJ0s
    bEpLa2zxpOQR/TarZmnbAgMBAAGjYjBgMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUE
    DDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMCsGA1UdEQQkMCKCCGx1bmEtbHhj
    hwSsEAADhxAmAv+2AAQqXPgWPv/+spI7MA0GCSqGSIb3DQEBCwUAA4ICAQAu9dXw
    B9yw3i46n/xchMLkg2Isf5cisz9XhmGfpbJxxXcJfpzZcnZMJfypTvkbzwV+Wik0
    kW4S+l7YphV1ZwomsXkSBlqExutQdKj4g8MosWGSuGTXOsd81+AdatBSQtOIE8/u
    DKcWCMgoqSVMottsFMSp59fEii86KhtldQ2ddEyFBru7ybCw3Ek45vb2dT4Ou273
    zaHFDaN81Hs0X8a4GhhWR3kzPulCP1gW8rqWqXOmYWsHfTq9k2sZOVnZyg5SbUGo
    2LFUQQXjjgotC4hYbBdjVqxYISer37OrtbkV2EVtRDSACjGsj9JOCKWFe2LMek13
    /JB0QNwQO9v3G341nNnzdxrjzZbR8URwgQH/9USQZaTIf9s4ALoyMQ3NmhrjYxBo
    bbufxxOENV7Wq9oIErKhE1zA1TqulFkNzInX0xrFu9LJZUHqDT0kSpgBLAueson7
    yic8Bw2Y8H3wtfP2B3aqCFBD8z1Ma4vXCM4hdbCzlusOkoTN54o3wyCowpMqnmuD
    txCEQw7MG6WpnUjv9Vv9GmxthGGlIjS3po+AjN+ildfcsaYk7Im5PNGpKNYA4ZFv
    HqQc5RLTmIOZagNDx9wA42d/3E/H9vWEJL6EpVW82kFq84f1MP9O9gLj7O9muYaE
    DXxtjbM3BQ2VeRQEyb5SanfVezYmsWhSqDgDqg==
    -----END CERTIFICATE-----
  certificate_fingerprint: 9867aa59324a1a3fda5eeae3952765ebf7ceb433c0fc2545b6236f833fb43468
  driver: lxc
  driver_version: 3.0.3
  kernel: Linux
  kernel_architecture: x86_64
  kernel_version: 4.15.0-43-generic
  server: lxd
  server_pid: 17923
  server_version: 3.0.3
  storage: zfs
  storage_version: 0.7.5-1ubuntu16.4
  server_clustered: false
  server_name: luna-lxc
  project: ""