diff --git a/pkgs/os-specific/linux/opensnitch-ebpf/default.nix b/pkgs/os-specific/linux/opensnitch-ebpf/default.nix
index 1c3fd836d813..9f89e2d7abd1 100644
--- a/pkgs/os-specific/linux/opensnitch-ebpf/default.nix
+++ b/pkgs/os-specific/linux/opensnitch-ebpf/default.nix
@@ -43,12 +43,21 @@ stdenv.mkDerivation rec {
 
   installPhase = ''
     runHook preInstall
+
     for file in opensnitch*.o; do
       install -Dm644 "$file" "$out/etc/opensnitchd/$file"
     done
+
     runHook postInstall
   '';
 
+  postFixup = ''
+    # reduces closure size significantly (fixes https://github.com/NixOS/nixpkgs/issues/391351)
+    for file in $out/etc/opensnitchd/*.o; do
+      llvm-strip $file
+    done
+  '';
+
   meta = with lib; {
     description = "eBPF process monitor module for OpenSnitch";
     homepage = "https://github.com/evilsocket/opensnitch";