chore: address moby seccomp deprecation

Author: dtrudg

go.mod

@@ -33,6 +33,7 @@ require (
 	github.com/gosimple/slug v1.15.0
 	github.com/moby/buildkit v0.24.0
 	github.com/moby/go-archive v0.1.0
+	github.com/moby/profiles/seccomp v0.1.0
 	github.com/moby/sys/sequential v0.6.0
 	github.com/moby/sys/user v0.4.0
 	github.com/moby/sys/userns v0.1.0
@@ -204,7 +205,6 @@ require (
 	github.com/moby/docker-image-spec v1.3.1 // indirect
 	github.com/moby/locker v1.0.1 // indirect
 	github.com/moby/patternmatcher v0.6.0 // indirect
-	github.com/moby/profiles/seccomp v0.1.0 // indirect
 	github.com/moby/sys/atomicwriter v0.1.0 // indirect
 	github.com/moby/sys/mount v0.3.4 // indirect
 	github.com/moby/sys/mountinfo v0.7.2 // indirect

internal/pkg/runtime/engine/config/oci/config.go

@@ -9,7 +9,7 @@ import (
 	"encoding/json"
 	"fmt"
 
-	dseccomp "github.com/docker/docker/profiles/seccomp"
+	mseccomp "github.com/moby/profiles/seccomp"
 	"github.com/opencontainers/cgroups"
 	specs "github.com/opencontainers/runtime-spec/specs-go"
 	"github.com/sylabs/singularity/v4/internal/pkg/runtime/engine/config/oci/generate"
@@ -174,7 +174,7 @@ func DefaultConfigV1() (*generate.Generator, error) {
 	}
 
 	if seccomp.Enabled() {
-		config.Linux.Seccomp, err = dseccomp.GetDefaultProfile(&config)
+		config.Linux.Seccomp, err = mseccomp.GetDefaultProfile(&config)
 		if err != nil {
 			return nil, fmt.Errorf("failed to get seccomp default profile: %s", err)
 		}

internal/pkg/security/seccomp/seccomp_supported.go

@@ -15,7 +15,7 @@ import (
 	"syscall"
 
 	"github.com/ccoveille/go-safecast"
-	dseccomp "github.com/docker/docker/profiles/seccomp"
+	mseccomp "github.com/moby/profiles/seccomp"
 	"github.com/opencontainers/runtime-spec/specs-go"
 	lseccomp "github.com/seccomp/libseccomp-golang"
 	"github.com/sylabs/singularity/v4/internal/pkg/runtime/engine/config/oci/generate"
@@ -285,7 +285,7 @@ func LoadProfileFromFile(profile string, generator *generate.Generator) error {
 		generator.Config.Process.Capabilities = &specs.LinuxCapabilities{}
 	}
 
-	seccompConfig, err := dseccomp.LoadProfile(string(data), generator.Config)
+	seccompConfig, err := mseccomp.LoadProfile(string(data), generator.Config)
 	if err != nil {
 		return err
 	}