[docker image] set filter-syscalls = false in nix.conf to workaround missing seccomp BPF program in arm64 linux

[docker image] set filter-syscalls = false in nix.conf to workaround missing seccomp BPF program in arm64 linux #9