Hi Mimi, > Fix for: > "container_linux.go:367: starting container process caused: error > adding seccomp filter rule for syscall bdflush: permission denied": > OCI permission denied" I was surprised crun is updated but runc not, but LGTM. It'd be nice if somebody test it with public travis (I no longer have access). Reviewed-by: Petr Vorel <petr.vorel@xxxxxxxxx> IMHO from a long term perspective it'd be nice to create GitHub Actions profile (but that's not related to this patchset). Kind regards, Petr