diff --git a/nixosModules/clanCore/vm.nix b/nixosModules/clanCore/vm.nix
index 479d23afb..08f6779c8 100644
--- a/nixosModules/clanCore/vm.nix
+++ b/nixosModules/clanCore/vm.nix
@@ -37,14 +37,13 @@ let
     virtualisation.fileSystems = lib.mkForce ({
       "/nix/store" = {
         device = "nix-store";
-        options = [ "x-systemd.requires=systemd-modules-load.service" ];
+        options = [ "x-systemd.requires=systemd-modules-load.service" "ro" ];
         fsType = "virtiofs";
       };
 
       "/" = {
         device = "/dev/vda";
         fsType = "ext4";
-        noCheck = true;
         options = [ "defaults" "x-systemd.makefs" ];
       };
 
diff --git a/pkgs/clan-cli/clan_cli/vms/run.py b/pkgs/clan-cli/clan_cli/vms/run.py
index 1e155ebdd..489a9cb86 100644
--- a/pkgs/clan-cli/clan_cli/vms/run.py
+++ b/pkgs/clan-cli/clan_cli/vms/run.py
@@ -277,10 +277,8 @@ def start_virtiofsd(socket_path: Path) -> Iterator[None]:
             str(socket_path),
             "--cache",
             "always",
-            "--posix-acl",
             "--sandbox",
             sandbox,
-            "--xattr",
             "--shared-dir",
             "/nix/store",
         ],