I noticed that the siduction kernel has CONFIG_SECURITY_LANDLOCK disabled:
$ uname -r
6.18.5-1-siduction-amd64
$ zgrep -i landlock /boot/config-$(uname -r)
# CONFIG_SECURITY_LANDLOCK is not set
Could CONFIG_SECURITY_LANDLOCK=y be added to the siduction kernel config?
Thanks for your work on siduction!