[release-1.28] Build containerd using runc v1.1.12

[twz123]

Description

Fixes CVE-2024-21626 for the bundled containerd binaries.

K0s cannot use any containerd release past v1.7.8 due to dependency conflicts. Hence ensure that the binary is built linking against a non-vulnerable version of runc at least.

See:

• Bump runc to v1.1.12 #3987
• Bump containerd to v1.7.13 #3989

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update

How Has This Been Tested?

• Manual test
• Auto test added

Checklist:

• My code follows the style guidelines of this project
• My commit messages are signed-off
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules
• I have checked my code and corrected any misspellings

[k0s-bot]

Backport failed for release-1.27, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally.

git fetch origin release-1.27
git worktree add -d .worktree/backport-3995-to-release-1.27 origin/release-1.27
cd .worktree/backport-3995-to-release-1.27
git checkout -b backport-3995-to-release-1.27
ancref=$(git merge-base 8d446375c2a344ca8ee85b601d02868d7629f65e eb90ee98283799e4dd423bde8c7992e733db95e1)
git cherry-pick -x $ancref..eb90ee98283799e4dd423bde8c7992e733db95e1