In order to enable support for seccomp inside the VM, here is what we need:

• Build the agent binary with the extra flag -tags "seccomp", this needs to be added to the Makefile. For more details, look at https://github.com/opencontainers/runc/blob/master/libcontainer/seccomp/seccomp_unsupported.go#L1 vs https://github.com/opencontainers/runc/blob/master/libcontainer/seccomp/seccomp_linux.go#L1. Indeed, we need linux, cgo and seccomp to build the right file.

• Ensure the image used on the guest does include libseccomp, otherwise we will end up with boot failure on the guest like this:

/usr/bin/cc-agent: error while loading shared libraries: libseccomp.so.2: cannot open shared object file: No such file or directory