for buildx rootless we only needed to disable the default apparmor policies for the container (for a bare-metal kubeadm deployed k8s on debian stable machines)