We currently set the nosymfollow mount up in https://gitlab.tails.boum.org/tails/tails/blob/e0600763f99d49b900eb9f3f9d61ac44d99b9490/config/chroot_local-includes/usr/local/lib/persistent-storage/pre-start. We should use a systemd `.mount` file instead once the `mount(8)` we have in Tails supports changing the `nosymfollow` option along with `--bind`. It's already implemented in the related branch: https://gitlab.tails.boum.org/tails/tails/-/compare/stable...19487-run-nosymfollow-mount Missing: * [x] update references to `pre-start` script that's removed by the commit referenced above * [x] Jenkins workers run Bookworm (part of sysadmin#17982), so "Scenario: Tails Persistent Storage behave tests" can pass