diff --git a/modules/system/boot/systemd.nix b/modules/system/boot/systemd.nix
index c8289ed36741..900cbfd0cd51 100644
--- a/modules/system/boot/systemd.nix
+++ b/modules/system/boot/systemd.nix
@@ -563,7 +563,9 @@ in
 
     system.activationScripts.systemd = stringAfter [ "groups" ]
       ''
-        mkdir -m 0755 -p /var/lib/udev /var/log/journal
+        mkdir -m 0755 -p /var/lib/udev
+        mkdir -p /var/log/journal
+        chmod 0755 /var/log/journal
 
         # Regenerate the hardware database /var/lib/udev/hwdb.bin
         # whenever systemd changes.