yep, proxycommand came to my mind as well. still i'd love to keep the containers as simple as possible (without sshd running) and just connect to them via their connector, only not on local, but rather the remote host, so that i could define my inventory file along the lines of i.e.
localhost ansible_host=127.0.0.1 ansible_connection=local ansible_user=localuser
google ansible_host=8.8.8.8 ansible_connection=ssh ansible_user=remoteuser
bind@google ansible_connection=lxd # this tells to connect to google via its (ssh) connector and then to continue to connect to bind@google via lxd.
so basically, i'm looking if ansible can do piping/pxoxying connectors/connections.