Docker Release 28.5.2 breaks Buildx Build on Sysbox Runtime version v0.6.7

@ctalledo

Docker Release 28.5.2, with following changes on sysbox runtime version v0.6.7 on Ubuntu 24.04 now get following errors, during docker buildx build

Packaging updates
Update BuildKit to v0.25.2. moby/moby#51398
Update Go runtime to 1.24.9. moby/moby#51387, docker/cli#6613
Update runc to v1.3.3. moby/moby#51394

Docker Engine version 28.5.2 release notes

Error:

container-builder
#1 [internal] booting buildkit
#1 pulling image artifactory.company.com:17114/moby/buildkit:v0.25.2
#1 pulling image artifactory.company.com:17114/moby/buildkit:v0.25.2 2.5s done
#1 creating container buildx_buildkit_container-builder0
#1 creating container buildx_buildkit_container-builder0 0.4s done
#1 ERROR: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: unsafe procfs detected: openat2 /proc/./sys/net/ipv4/ip_unprivileged_port_start: invalid cross-device link: unknown
------
 > [internal] booting buildkit:
------
ERROR: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: open sysctl net.ipv4.ip_unprivileged_port_start file: unsafe procfs detected: openat2 /proc/./sys/net/ipv4/ip_unprivileged_port_start: invalid cross-device link: unknown

Reproduce docker buildx build on Ubuntu 24.04 with Sysbox runtime v0.6.7 and Docker Engine 28.5.2, using the reported BuildKit v0.25.2 image. Start by checking the Docker 28.5.2 release notes and the reported OCI/runc error; done means identifying the compatibility cause and confirming a build succeeds or documenting the required supported versions.