fix: nsjail is a dynamic linked program, use the same env as builder

Runner.Dockerfile

@@ -11,10 +11,12 @@ FROM ${IMAGE_PREFIX}/debian-full:${VERSION} AS rootfs-full
 FROM ${IMAGE_PREFIX}/debian-run:${VERSION} AS rootfs-run
 
 # Main image
-FROM docker.io/library/alpine
+FROM docker.io/library/debian:bookworm-slim
 
 WORKDIR /app
-RUN apk --no-cache add tzdata ca-certificates bash tini
+RUN    apt-get update && apt-get upgrade -y \
+    && apt-get install -y ca-certificates libnl-route-3-200 libprotobuf32 tini \
+    && apt-get clean && rm -rf /var/lib/apt/lists
 
 # sources
 COPY --from=base /builder/resource/runner /app/resource/runner

docker-compose.yml

@@ -47,7 +47,6 @@ services:
       - SETUP_CGROUP=true
     volumes:
       - runner:/app/resource/runner/user
-      - container:/var/lib/containerd
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
     depends_on:

resource/deploy/runner.yaml

@@ -68,12 +68,7 @@ spec:
           volumeMounts:
             - name: runner-vol
               mountPath: /app/resource/runner/user
-            - name: container-vol
-              mountPath: /var/lib/containerd
       volumes:
         - name: runner-vol
           persistentVolumeClaim:
             claimName: runner-pvc
-        - name: container-vol
-          persistentVolumeClaim:
-            claimName: runner-pvc