diff --git a/roles/pve-subscribe/tasks/main.yml b/roles/pve-subscribe/tasks/main.yml
index 4c09dd7..d3ed3fb 100644
--- a/roles/pve-subscribe/tasks/main.yml
+++ b/roles/pve-subscribe/tasks/main.yml
@@ -1,13 +1,19 @@
 ---
 
-- name: Assert incompatible target
-  fail: msg="Target doesn't look like a Proxmox instance. Proceeding would cause damage to the target."
-  when: ansible_facts.cmdline.BOOT_IMAGE.find('-pve') == -1
+- block:
+  - name: Protect non-pve systems
+    fail:
+      msg: 'Target system is not instance of Proxmox'
+    when: ansible_facts.cmdline.BOOT_IMAGE.find('-pve') == -1 or
+          ansible_virtualization_role != "host" # Catches lxc guests on pve kernel
 
-- name: Configuring pve for unsubscribed operation
-  import_tasks: no-subscription.yml
-  when: pve_subscription_key | length == 0
+  - name: Configuring pve for unsubscribed operation
+    import_tasks: no-subscription.yml
+    when: not pve_subscription_key
 
-- name: Configuring pve for licensed operation
-  import_tasks: enterprise.yml
-  when: pve_subscription_key | length != 0
+  - name: Configuring pve for licensed operation
+    import_tasks: enterprise.yml
+    when: pve_subscription_key
+
+  rescue:
+  - meta: noop