Install fails for aarch64 in docker

[mmlb]

Describe the bug

I'm trying to build a https://github.com/NixOS/docker like container for aarch64 using buildx's qemu soft emulation support, but am always getting a failure message of error: while setting up the build environment: unable to load seccomp BPF program: Invalid argument

Steps To Reproduce

Local/harder to setup:

1. Clone: https://github.com/mmlb/docker
2. Setup docker buildx multi-arch support via qemu (see buildx/buildkit docs)
3. Build with docker buildx build --platform linux/arm64 .
4. See error

Easier:

1. Fork: https://github.com/mmlb/docker
2. Commit and push debug code and see GHA try and build
3. See error

Expected behavior

Installing nix in aarch64 docker container works.

nix-env --version output

Additional context

Searching for bpf errors leads me to #2651 (comment) which looks pretty similar but the workaround there doesn't help me. The Dockerfile is already setting sandbox = false in /etc/nix/nix.conf and I duplicated in /root/.nix/nix.conf too which no luck.

I'm not sure if @edolstra's comment #2651 (comment) would help here as I don't think its a username space issue. The same Dockerfile works in x86_64 mode.

[matthewbauer]

Might be a bug in docker? I see this issue from searching for "seccomp_load invalid argument":

opencontainers/runc#2865

But you can turn off seccomp in Nix with filter-syscalls = false.

[mmlb]

awesome filter-syscalls = false works. Should I open up a separate feature request to make note of #2651 (comment)?

[nixos-discourse]

This issue has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/cross-compilation-failing-with-nix-and-docker-on-macos/22169/4