Unfortunately on Ubuntu, seccomp is opt-in only. Works well when enabled though.