To enable outgoing traffic from LXC container, we need the following iptables rule:

iptables -t nat -A POSTROUTING -o ens192 -j MASQUERADE

Alternatively, we could prepare the list of outgoing traffic needed (I think there is only the need to connect to the port 53 in TCP and UDP for DNS resolution) and allow only such traffic.