diff --git a/build-image/build-image.nix b/build-image/build-image.nix
index 8f54f53..9cfb806 100644
--- a/build-image/build-image.nix
+++ b/build-image/build-image.nix
@@ -133,11 +133,11 @@ let
   # their contents.
   pathsToLayer = paths: runCommand "layer.tar" {
   } ''
-    tar --no-recursion -rf "$out" \
+    tar --no-recursion -Prf "$out" \
         --mtime="@$SOURCE_DATE_EPOCH" \
         --owner=0 --group=0 /nix /nix/store
 
-    tar -rpf "$out" --hard-dereference --sort=name \
+    tar -Prpf "$out" --hard-dereference --sort=name \
         --mtime="@$SOURCE_DATE_EPOCH" \
         --owner=0 --group=0 ${lib.concatStringsSep " " paths}
   '';