diff --git a/modules/system/boot/stage-1.nix b/modules/system/boot/stage-1.nix
index f78a5dda2d3b..92386440dd87 100644
--- a/modules/system/boot/stage-1.nix
+++ b/modules/system/boot/stage-1.nix
@@ -361,5 +361,6 @@ in {
   system.requiredKernelConfig = with config.lib.kernelConfig; [
     (isYes "TMPFS")
     (isYes "BLK_DEV_INITRD")
+    (isYes "SECURITYFS")
   ];
 }