Apparently I need to run docker with the --privileged flag, as that solves the problem:
./launcher rebuild app --docker-args '--privileged'
It’s not clear to me why this is the case. (This is on Fedora 42.) I’d love to understand what’s happening here.