@MikeS can you run the container with --security-opt seccomp=unconfined? I’m pretty sure this is a syscall blocking thing that changed from bullseye to bookworm together with a weird interaction from libseccomp and Docker that was solved in the newer releases.
We never experienced this because we officially only support the bookworm containers on Torizon OS 6 onwards.