diff --git a/pkgs/applications/networking/p2p/gnunet/default.nix b/pkgs/applications/networking/p2p/gnunet/default.nix
index 9127c0af06c8..d50245b45021 100644
--- a/pkgs/applications/networking/p2p/gnunet/default.nix
+++ b/pkgs/applications/networking/p2p/gnunet/default.nix
@@ -12,6 +12,7 @@
 
   # runtime deps
   adns,
+  bashNonInteractive,
   curl,
   gettext,
   gmp,
@@ -48,7 +49,7 @@ stdenv.mkDerivation (finalAttrs: {
   enableParallelBuilding = true;
 
   nativeBuildInputs = [
-    libtool
+    gettext # msgfmt
     makeWrapper
     meson
     ninja
@@ -57,8 +58,8 @@ stdenv.mkDerivation (finalAttrs: {
 
   buildInputs = [
     adns
+    bashNonInteractive
     curl
-    gettext
     gmp
     gnutls
     jansson
@@ -71,6 +72,7 @@ stdenv.mkDerivation (finalAttrs: {
     libopus
     libpulseaudio
     libsodium
+    libtool
     libunistring
     libxml2
     ncurses
@@ -78,6 +80,8 @@ stdenv.mkDerivation (finalAttrs: {
     zlib
   ] ++ lib.optional postgresqlSupport libpq;
 
+  strictDeps = true;
+
   preConfigure = ''
     # Brute force: since nix-worker chroots don't provide
     # /etc/{resolv.conf,hosts}, replace all references to `localhost'
@@ -122,5 +126,7 @@ stdenv.mkDerivation (finalAttrs: {
     maintainers = with lib.maintainers; [ pstn ];
     platforms = lib.platforms.unix;
     changelog = "https://git.gnunet.org/gnunet.git/tree/ChangeLog?h=v${finalAttrs.version}";
+    # meson: "Can not run test applications in this cross environment." (for dane_verify_crt_raw)
+    broken = !stdenv.buildPlatform.canExecute stdenv.hostPlatform;
   };
 })