diff --git a/windmill-worker/nsjail/run.bun.config.proto b/windmill-worker/nsjail/run.bun.config.proto
index 527d49cf7..b5e64beec 100644
--- a/windmill-worker/nsjail/run.bun.config.proto
+++ b/windmill-worker/nsjail/run.bun.config.proto
@@ -17,16 +17,24 @@ clone_newcgroup: false
 keep_caps: false
 keep_env: true
 
+mount {
+    src: "/nix/store"
+    dst: "/nix/store"
+	is_bind: true
+}
+
 mount {
     src: "/bin"
     dst: "/bin"
 	is_bind: true
+    mandatory: false
 }
 
 mount {
     src: "/lib"
     dst: "/lib"
 	is_bind: true
+    mandatory: false
 }
 
 mount {
@@ -47,6 +55,7 @@ mount {
     src: "/usr"
     dst: "/usr"
 	is_bind: true
+    mandatory: false
 }
 
 mount {