Comment by kylequest

You should check out DockerSlim [0] then :-) It'll generate a seccomp profile for you and it uses ptrace too.

[0] http://dockersl.im