Disable runc integration tests due to AppArmor issue

[saschagrunert]

What type of PR is this?

/kind failing-test

What this PR does / why we need it:

All runc integration tests are failing in CI due to an AppArmor issue in nested environments. The error occurs when runc tries to access /proc/sys/net/ipv4/ip_unprivileged_port_start, which AppArmor incorrectly interprets as trying to access /sys/... in detached mounts.

This is a known issue in runc that affects various container platforms. The maintainers advise against downgrading as the current version fixes multiple container escape vulnerabilities.

Which issue(s) this PR fixes:

None

Special notes for your reviewer:

TODO: Re-enable these tests when a mitigation is found.

Does this PR introduce a user-facing change?

None

[saschagrunert]

@kubernetes-sigs/cri-tools-maintainers PTAL

[SergeyKanzhelev]

/lgtm
/hold

holding in case you want more cri-o contributors to review

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: saschagrunert, SergeyKanzhelev

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [saschagrunert]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[saschagrunert]

/unhold

[ngopalak-redhat]

@saschagrunert The linked issues are resolved:

          # See: https://github.com/cri-o/cri-o/issues/9573
          # See: https://github.com/opencontainers/runc/issues/4968

Can we re-enabled this?
Context: I was looking at impact of opencontainers/runc#5103 on the cri-o related repos.

[saschagrunert]

@saschagrunert The linked issues are resolved:

          # See: https://github.com/cri-o/cri-o/issues/9573
          # See: https://github.com/opencontainers/runc/issues/4968

Can we re-enabled this? Context: I was looking at impact of opencontainers/runc#5103 on the cri-o related repos.

I think so, are you going to propose a PR for that change?

[ngopalak-redhat]

@saschagrunert The linked issues are resolved:

          # See: https://github.com/cri-o/cri-o/issues/9573
          # See: https://github.com/opencontainers/runc/issues/4968

Can we re-enabled this? Context: I was looking at impact of opencontainers/runc#5103 on the cri-o related repos.

I think so, are you going to propose a PR for that change?

Yes, I'll create a PR

[ngopalak-redhat]

/revert