fix seccomp:unconfined

There may be a better more general solution, but this fixes
`seccomp:unconfined`

Fixes #199

podman_compose.py

@@ -706,6 +706,9 @@ def normalize_service(service):
     for key in ("env_file", "security_opt"):
         if key not in service: continue
         if is_str(service[key]): service[key]=[service[key]]
+        for i in range(len(service[key])):
+            if service[key][i] == 'seccomp:unconfined':
+                service[key][i] = 'seccomp=unconfined'
     for key in ("environment", "labels"):
         if key not in service: continue
         service[key] = norm_as_dict(service[key])

tests/seccomp/context/Dockerfile

@@ -0,0 +1,3 @@
+FROM busybox
+RUN mkdir -p /var/www/html/ && date -Iseconds > /var/www/html/index.txt
+CMD ["busybox", "httpd", "-f", "-p", "80", "-h", "/var/www/html"]

tests/seccomp/docker-compose.yml

@@ -0,0 +1,10 @@
+version: "3"
+services:
+  web1:
+    build: ./context
+    image: my-busybox-httpd
+    ports:
+      - "8080:80"
+    command: env
+    security_opt:
+      - seccomp:unconfined