diff --git a/hosts/boreal/default.nix b/hosts/boreal/default.nix
index b7ab958..5ed208b 100644
--- a/hosts/boreal/default.nix
+++ b/hosts/boreal/default.nix
@@ -109,6 +109,8 @@ in
   };
   my.displayManager.sddm.enable = true;
 
+  # TODO: remove when https://nixpk.gs/pr-tracker.html?pr=124237 reaches unstable
+  nix.sandboxPaths = [ "/bin/sh=${pkgs.bash}/bin/sh" ];
 
   sound.enable = true;
   hardware.pulseaudio = {