diff --git a/image/mkosi.conf.d/secure-boot-tpm.conf b/image/mkosi.conf.d/secure-boot-tpm.conf
index d9d006e4a..cf302785f 100644
--- a/image/mkosi.conf.d/secure-boot-tpm.conf
+++ b/image/mkosi.conf.d/secure-boot-tpm.conf
@@ -5,4 +5,5 @@ Packages=
            sbsigntools,
            efitools,
            mokutil,
-           tpm2-tools
+           tpm2-tools,
+           systemd-boot-unsigned,