Bartłomiej Piotrowski commented:
All shared runners run Docker 20.10.10-rc1 now, which includes a change to properly return ENOSYS on unknown syscalls, and have updated seccomp profiles for running buildah and flatpak. This is good enough for jobs running directly on Fedora 35 or Rawhide (like https://gitlab.gnome.org/GNOME/gnome-desktop/-/jobs/1584304), but not for ci-templates, which use buildah with a seccomp profile without clone3
(https://gitlab.gnome.org/GNOME/gnome-control-center/-/jobs/1573128).