seems like SYS_SECCOMP is missing even from current glibc? bionic and musl both have it, but it seems like with glibc you can't even #include <linux/signal.h> as a workaround because that's incompatible with <signal.h>? (this was with `ldd (Debian GLIBC 2.40-6+gl0) 2.40`.)