Generate SECCOMP Profiles for Containers
https://podman.io/blogs/2019/10/15/generate-seccomp-profiles.html
Docker | TutorialThis blog post explains how to generate SECCOMP profiles for containers. This is possible using podman and eBPF filters. Custom SECCOMP profiles allow limiting the container to exactly those syscalls it needs.