Revert "metropolis/node/core: mount /sys/fs/bpf"
This reverts commit 201b527e632caec8480500bc1cca5d8ab0f5896b.
The mount does not propagate to privileged containers,
so we don't need this to be mounted on the host after all.
Change-Id: I6f6589664396f5285ba28b981faf8654929ea99a
Reviewed-on: https://review.monogon.dev/c/monogon/+/3262
Tested-by: Jenkins CI
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>
diff --git a/metropolis/node/core/mounts.go b/metropolis/node/core/mounts.go
index db8529c..02173c5 100644
--- a/metropolis/node/core/mounts.go
+++ b/metropolis/node/core/mounts.go
@@ -38,9 +38,6 @@
{"/sys/kernel/tracing", "tracefs", unix.MS_NOEXEC | unix.MS_NOSUID | unix.MS_NODEV},
{"/sys/firmware/efi/efivars", "efivarfs", unix.MS_NOEXEC | unix.MS_NOSUID | unix.MS_NODEV},
{"/sys/fs/pstore", "pstore", unix.MS_NOEXEC | unix.MS_NOSUID | unix.MS_NODEV},
- // Nothing in Metropolis currently requires BPF maps,
- // but some privileged customer applications do.
- {"/sys/fs/bpf", "bpf", unix.MS_NOEXEC | unix.MS_NOSUID | unix.MS_NODEV},
{"/proc", "proc", unix.MS_NOEXEC | unix.MS_NOSUID | unix.MS_NODEV},
{"/dev", "devtmpfs", unix.MS_NOEXEC | unix.MS_NOSUID},
{"/dev/pts", "devpts", unix.MS_NOEXEC | unix.MS_NOSUID},