Somehow permissions for android device nodes are wrong inside the container.
Important ones are,
root@bullhead:/ # ls -l /dev/kgsl-3d0 crw-rw-rw- system system 238, 0 1970-02-18 21:49 kgsl-3d0 root@bullhead:/ # ls -l /dev/ion crw-rw-r-- system system 10, 95 1970-02-18 21:48 ion
Those seems not to have 600 permissions inside container somehow and needs to be fixed.
A simple workaround for now is,
phablet@ubuntu-phablet:~$ cat /etc/udev/rules.d/55-android.rules KERNEL=="kgsl-3d0" MODE="0666" KERNEL=="ion" MODE="0666"
But this shows bigger issue and needs to be fixed first.