Disabling ASLR not supported in inner "privileged" containers

Background: I am working on containerizing a buffer overflow exploit lab for our security class, and one of the issues I ran into is that the default seccomp profile limits the personality() syscall to "safe" values which prevents ASLR from being turned off.

I began investigating sysbox as a way to run "privileged" containers which allow the personality() syscall to disable process ASLR. However, this doesn't seem to work. I'm running sysbox 0.2.1 on Ubuntu 20.04.2.

Steps to reproduce:

1. On the host, run: docker run --runtime=sysbox-runc -it nestybox/alpine-docker:latest
2. Start dockerd: dockerd 1>/var/log/dockerd.log 2>&1 &
3. In the container, create a "privileged" inner container: docker run --privileged -it --rm alpine:3.12
4. In the inner container, add some packages for simple development and debugging: apk add gcc musl-dev gdb nano
5. Make a small C program and compile it.
6. Run the resulting executable under gdb:

(gdb) r
Starting program: /hello
warning: Error disabling address space randomization: Operation not permitted
Hello, world!
[Inferior 1 (process 52) exited normally]
(gdb)

Obviously this is a niche use case so it might not be worth addressing. However, it might be useful for debugging reproduceable crashes inside a container, etc.