diff --git a/ops/machines/build01/default.nix b/ops/machines/build01/default.nix
index 7c01840a4..7f13ae67d 100644
--- a/ops/machines/build01/default.nix
+++ b/ops/machines/build01/default.nix
@@ -91,6 +91,9 @@ in
         group = "buildkite-agents";
       };
     };
+  systemd.tmpfiles.rules = [
+    "d '/nix/var/nix/gcroots/buildkite' 0770 - buildkite-agents - -"
+  ];
 
   services.openssh.enable = true;
   time.timeZone = "UTC";
diff --git a/ops/pipelines/depot.nix b/ops/pipelines/depot.nix
index 293ef12ae..5737f7357 100644
--- a/ops/pipelines/depot.nix
+++ b/ops/pipelines/depot.nix
@@ -25,7 +25,8 @@ let
         label = ":anchor:";
         branches = "refs/heads/canon";
         command = ''
-          nix-build -A ci.gcroot --out-link /nix/var/nix/gcroots/depot/canon
+          rm /nix/var/nix/gcroots/buildkite/canon
+          nix-build -A ci.gcroot --out-link /nix/var/nix/gcroots/buildkite/canon
         '';
 
         # Ensure that anchoring happens on build01, so that a possibly deployed