diff --git a/flake.nix b/flake.nix
index 3571e58..2b123b4 100644
--- a/flake.nix
+++ b/flake.nix
@@ -229,6 +229,14 @@
                       (./templates/downstream + "/hardware-configuration.nix")
                       (./templates/downstream + "/system.nix")
                       ({ lib, ... }: {
+                        # The whole BUILD closure rides along: a real
+                        # install rebuilds the per-machine drvs (etc,
+                        # units, initrd, …) whose builders need tools
+                        # from no runtime closure. This is the documented
+                        # offline-rebuild mechanism; it is what makes the
+                        # ISO big and the install networkless.
+                        system.includeBuildDependencies = true;
+
                         nomarchy.system.snapper.enable = true;
                         nomarchy.system.greeter.autoLogin = username;
                         swapDevices = [{ device = "/swap/swapfile"; }];
@@ -250,15 +258,8 @@
                   representativeInstall.config.system.build.toplevel
                   template.homeConfigurations.${username}.activationPackage
 
-                  # A real install rebuilds the few drvs that embed the
-                  # user's hostname/username/UUIDs (etc, initrd, toplevel,
-                  # HM activation). Their BUILDERS need tools that are in
-                  # no runtime closure (etc uses python3-minimal, the
-                  # initrd its packing tools) — inputDerivation pins each
-                  # drv's full build inputs.
-                  representativeInstall.config.system.build.toplevel.inputDerivation
-                  representativeInstall.config.system.build.etc.inputDerivation
-                  representativeInstall.config.system.build.initialRamdisk.inputDerivation
+                  # The HM activation is rebuilt per-username in the
+                  # installer chroot; pin its build inputs too.
                   template.homeConfigurations.${username}.activationPackage.inputDerivation
 
                   # …and one representative disko script: its tool closure