diff --git a/flake.lock b/flake.lock
index b424b9c4a..6c7036a57 100644
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1743938762,
-        "narHash": "sha256-UgFYn8sGv9B8PoFpUfCa43CjMZBl1x/ShQhRDHBFQdI=",
+        "lastModified": 1755268003,
+        "narHash": "sha256-nNaeJjo861wFR0tjHDyCnHs1rbRtrMgxAKMoig9Sj/w=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "74a40410369a1c35ee09b8a1abee6f4acbedc059",
+        "rev": "32f313e49e42f715491e1ea7b306a87c16fe0388",
         "type": "github"
       },
       "original": {
diff --git a/flake.nix b/flake.nix
index 1e1304460..966074a85 100644
--- a/flake.nix
+++ b/flake.nix
@@ -38,6 +38,15 @@
             '';
           });
 
+          cryptsetup = prev.cryptsetup.overrideAttrs (old: rec {
+            pname = "cryptsetup";
+            version = "2.8.1";
+            src = prev.fetchurl {
+              url = "mirror://kernel/linux/utils/cryptsetup/v${prev.lib.versions.majorMinor version}/${pname}-${version}.tar.xz";
+              hash = "sha256-LDN563ZZfcq1CRFEmwE+JpfEv/zHFtu/DZsOj7u0b7Q=";
+            };
+          });
+
           # dnf5 assumes a TTY with a very small width by default, truncating its output instead of line-wrapping
           # it. Force it to use more VT columns to avoid this, and make debugging errors easier.
           dnf5-stub = prev.writeScriptBin "dnf5" ''
@@ -94,7 +103,8 @@
         # Note that it's *not* a legacy attribute.
         legacyPackages = {
           generate = pkgs.callPackage ./nix/generate.nix { };
-        } // pkgs;
+        }
+        // pkgs;
 
         packages.mkosi = mkosiDev;