diff --git a/hosts/thinkpad/modules/security/default.nix b/hosts/thinkpad/modules/security/default.nix
index 63b94eb..fbbeb97 100644
--- a/hosts/thinkpad/modules/security/default.nix
+++ b/hosts/thinkpad/modules/security/default.nix
@@ -18,6 +18,8 @@
           cue = true;
         };
       };
+      # fixes run0 failing to execute
+      services.systemd-run0 = { };
     };
     krb5 = {
       enable = true;