diff --git a/internal/server/instance/drivers/driver_lxc.go b/internal/server/instance/drivers/driver_lxc.go
index 2464622c8ec..5d3e6321424 100644
--- a/internal/server/instance/drivers/driver_lxc.go
+++ b/internal/server/instance/drivers/driver_lxc.go
@@ -2377,7 +2377,7 @@ func (d *lxc) startCommon() (string, []func() error, error) {
 
 		// Mount /run as a tmpfs if it exists and isn't already mounted.
 		if !slices.Contains(lxcMounts, "/run") {
-			err := lxcSetConfigItem(cc, "lxc.mount.entry", "none run tmpfs none,nosuid,nodev,noexec,mode=755,optional")
+			err := lxcSetConfigItem(cc, "lxc.mount.entry", "none run tmpfs none,mode=755,optional")
 			if err != nil {
 				return "", nil, err
 			}