The released images are not reproducible

[kvinwang]

runc embeds the git commit hash into its binary:

COMMIT := $(shell git describe --dirty --long --always)

See, here: https://github.com/opencontainers/runc/blob/e0adafb4cae13c65a798a5aa008a436ef1c15482/Makefile#L18

While this line was intended to be deterministic, the length of the generated abbreviated git hash has increased (e.g., from 9833ff3 to 9833ff39) as the upstream runc repository accumulated more commits.