have the lxc-sliceimage initscript:

. log its stuff in /var/log/
. run as much as possible in the root context when invoking simple file operations to avoid painful warnings from sed and the like about security contexts