feat: add security_opt support for execution client containers

src/expb/configs/scenarios.py

@@ -161,6 +161,10 @@ class Scenario(BaseModel):
         description="Extra commands to run in the execution client docker container during the test execution.",
         default=[],
     )
+    security_opt: list[str] = Field(
+        description="Docker security options for the execution client container (e.g., seccomp=unconfined).",
+        default=[],
+    )
 
     @field_validator("client", mode="before")
     @classmethod

src/expb/payloads/executor/executor.py

@@ -230,6 +230,8 @@ def start_execution_client(
             run_kwargs["cpuset_cpus"] = self.config.resources.cpuset
         if self.config.resources and self.config.resources.mem_swappiness is not None:
             run_kwargs["mem_swappiness"] = self.config.resources.mem_swappiness
+        if self.config.security_opt:
+            run_kwargs["security_opt"] = self.config.security_opt
         container = self.config.docker_client.containers.run(**run_kwargs)
         return container
 

src/expb/payloads/executor/executor_config.py

@@ -62,6 +62,7 @@ def __init__(
             scenario.extra_volumes
         )
         self.execution_client_extra_commands = scenario.extra_commands
+        self.security_opt = scenario.security_opt
 
         # Executor Additional Tooling config
         ## Docker client