The issue is that O_PATH doesn't work from these containers:
2025 11:00:08 openat(4, "run", O_RDONLY|O_NOFOLLOW|O_CLOEXEC|O_PATH) = -1 ELOOP (Too many levels of symbolic links)
Apparently, O_PATH was added in 2.6.39, so this makes sense now.
The issue is that O_PATH doesn't work from these containers:
2025 11:00:08 openat(4, "run", O_RDONLY| O_NOFOLLOW| O_CLOEXEC| O_PATH) = -1 ELOOP (Too many levels of symbolic links)
Apparently, O_PATH was added in 2.6.39, so this makes sense now.