diff --git a/ops/pipelines/depot.nix b/ops/pipelines/depot.nix
index 5eff62267..05e3ca0d8 100644
--- a/ops/pipelines/depot.nix
+++ b/ops/pipelines/depot.nix
@@ -27,6 +27,11 @@ let
         command = ''
           nix-build -A ci.gcroot --out-link /nix/var/nix/gcroots/depot/canon
         '';
+
+        # Ensure that anchoring happens on whitby, so that cache.tvl.su always
+        # has the full cache. Unanchored machines may garbage collect live
+        # paths.
+        agents.hostname = "whitby"; # TODO(tazjin): b/433
       }
     ];
   };