This was bound to happen to web apps eventually. We have been dealing with this on the desktop app side for many years by telling folks to set " --security-opt seccomp=unconfined"
As your device ages it never gets software upgrades, eventually the software that is running in a modern distro in the docker container will make syscalls that seccomp filters or cannot translate properly.
Out of curiosity what is the kernel version on these things?