I just replaced my Debian Jessie kernel with Ubuntu Trusty's 3.13 kernel. The result is that unprivileged ephemeral containers are working just fine. I guess there might be an Ubuntu specific kernel patch that makes this work with Ubuntu kernels but not Debian kernels.
cheers --m
