diff --git a/nixos/modules/security/systemd-confinement.nix b/nixos/modules/security/systemd-confinement.nix
index fa58ea22f868..041c90033886 100644
--- a/nixos/modules/security/systemd-confinement.nix
+++ b/nixos/modules/security/systemd-confinement.nix
@@ -107,7 +107,7 @@ in {
         serviceConfig = {
           ReadOnlyPaths = [ "+/" ];
           RuntimeDirectory = [ "confinement/${mkPathSafeName name}" ];
-          RootDirectory = lib.mkDefault "/run/confinement/${mkPathSafeName name}";
+          RootDirectory = "/run/confinement/${mkPathSafeName name}";
           InaccessiblePaths = [
             "-+/run/confinement/${mkPathSafeName name}"
           ];