tl/dr: libseccomp version used in combination with docker's default seccomp profile.
More discussion here https://github.com/moby/moby/issues/41389