1diff --git a/windmill-worker/nsjail/run.powershell.config.proto b/windmill-worker/nsjail/run.powershell.config.proto
2index 93a48d4fe..97dc236e5 100644
3--- a/windmill-worker/nsjail/run.powershell.config.proto
4+++ b/windmill-worker/nsjail/run.powershell.config.proto
5@@ -15,10 +15,17 @@ keep_caps: false
6 keep_env: true
7 mount_proc: true
8
9+mount {
10+ src: "/nix/store"
11+ dst: "/nix/store"
12+ is_bind: true
13+}
14+
15 mount {
16 src: "/bin"
17 dst: "/bin"
18 is_bind: true
19+ mandatory: false
20 }
21
22 mount {
23@@ -38,6 +45,7 @@ mount {
24 src: "/lib"
25 dst: "/lib"
26 is_bind: true
27+ mandatory: false
28 }
29
30
31@@ -53,6 +61,7 @@ mount {
32 src: "/usr"
33 dst: "/usr"
34 is_bind: true
35+ mandatory: false
36 }
37
38 mount {