diff --git a/ops/machines/build01/default.nix b/ops/machines/build01/default.nix
index 7f13ae67d..151286782 100644
--- a/ops/machines/build01/default.nix
+++ b/ops/machines/build01/default.nix
@@ -93,6 +93,7 @@ in
     };
   systemd.tmpfiles.rules = [
     "d '/nix/var/nix/gcroots/buildkite' 0770 - buildkite-agents - -"
+    "z '/nix/var/nix/gcroots' 0771 - - - -"
   ];
 
   services.openssh.enable = true;
diff --git a/ops/pipelines/depot.nix b/ops/pipelines/depot.nix
index 5737f7357..ce8755bcc 100644
--- a/ops/pipelines/depot.nix
+++ b/ops/pipelines/depot.nix
@@ -25,7 +25,6 @@ let
         label = ":anchor:";
         branches = "refs/heads/canon";
         command = ''
-          rm /nix/var/nix/gcroots/buildkite/canon
           nix-build -A ci.gcroot --out-link /nix/var/nix/gcroots/buildkite/canon
         '';