treewide: remove sandboxroot

Be gone! 🎉

Change-Id: Ibd032f4bcfe079c7d2acf4e444f543da30a14c53
Reviewed-on: https://review.monogon.dev/c/monogon/+/4398
Tested-by: Jenkins CI
Reviewed-by: Leopold Schabel <leo@monogon.tech>
diff --git a/build/bazel/go.MODULE.bazel b/build/bazel/go.MODULE.bazel
index 66d09cf..b463566 100644
--- a/build/bazel/go.MODULE.bazel
+++ b/build/bazel/go.MODULE.bazel
@@ -64,7 +64,6 @@
     "com_github_prometheus_client_golang",
     "com_github_prometheus_node_exporter",
     "com_github_rivo_uniseg",
-    "com_github_rmohr_bazeldnf",
     "com_github_sbezverk_nfproxy",
     "com_github_schollz_progressbar_v3",
     "com_github_spf13_cobra",
diff --git a/build/remote_worker/BUILD.bazel b/build/remote_worker/BUILD.bazel
index 742d684..a091464 100644
--- a/build/remote_worker/BUILD.bazel
+++ b/build/remote_worker/BUILD.bazel
@@ -1,34 +1,13 @@
 load("@aspect_bazel_lib//lib:expand_template.bzl", "expand_template")
 load("@bazel_skylib//rules:write_file.bzl", "write_file")
 load("@rules_oci//oci:defs.bzl", "oci_image", "oci_push")
-load("@rules_pkg//pkg:mappings.bzl", "pkg_mklink")
-load("@rules_pkg//pkg:tar.bzl", "pkg_tar")
-
-# Because bazeldnf writes multiple files when using their symlink feature,
-# we have to do them manually with a second layer.
-# https://github.com/rmohr/bazeldnf/issues/88
-pkg_mklink(
-    name = "ld-link",
-    link_name = "usr/bin/ld",
-    target = "/usr/bin/ld.bfd",
-)
-
-pkg_tar(
-    name = "links",
-    srcs = [
-        ":ld-link",
-    ],
-)
 
 oci_image(
     name = "remote_worker_image",
     base = "@distroless_base",
     entrypoint = [],
     tags = ["no-remote"],
-    tars = [
-        "//third_party/sandboxroot:sandbox",
-        ":links",
-    ],
+    tars = [],
     visibility = ["//visibility:private"],
     workdir = "/root",
 )