The current runc binary in cri-containerd-cni-*.*.*-linux-*.tar.gz does not work on RHEL/CentOS 7, because it is linked with a newer version of libseccomp.
And we don't want to downgrade the libseccomp version, because we want to support the latest syscall table that is hardcoded in libseccomp.
So, we should do either one of:
Continuation of #6447 (comment)