diff --git a/host-specific/othinus/manticore-vm.nix b/host-specific/othinus/manticore-vm.nix
index ce39fa2..a3e065c 100644
--- a/host-specific/othinus/manticore-vm.nix
+++ b/host-specific/othinus/manticore-vm.nix
@@ -78,15 +78,6 @@ let
           };
 
           boot.initrd.availableKernelModules = [ "virtiofs" ];
-          fileSystems."/var/lib/manticore" = {
-            device = "manticore-data";
-            fsType = "virtiofs";
-            neededForBoot = true;
-            options = [
-              "rw"
-              "relatime"
-            ];
-          };
 
           services = {
             manticore = {
@@ -115,6 +106,8 @@ let
             };
           };
 
+          systemd.services.manticore.serviceConfig.SystemCallFilter = lib.mkAfter [ "mincore" ];
+
           security.sudo.wheelNeedsPassword = false;
 
           virtualisation = {
@@ -122,6 +115,15 @@ let
             memorySize = 24576;
             diskSize = 8192;
             graphics = false;
+            fileSystems."/var/lib/private/manticore" = {
+              device = "manticore-data";
+              fsType = "virtiofs";
+              neededForBoot = true;
+              options = [
+                "rw"
+                "relatime"
+              ];
+            };
             qemu = {
               enableSharedMemory = true;
               forceAccel = true;