diff --git a/krebs/3modules/permown.nix b/krebs/3modules/permown.nix
index 1e6471ede..f190bf86a 100644
--- a/krebs/3modules/permown.nix
+++ b/krebs/3modules/permown.nix
@@ -37,6 +37,12 @@ with import <stockholm/lib>;
     plans = attrValues config.krebs.permown;
   in mkIf (plans != []) {
 
+    system.activationScripts.permown = let
+      mkdir = plan: /* sh */ ''
+        ${pkgs.coreutils}/bin/mkdir -p ${shell.escape plan.path}
+      '';
+    in concatMapStrings mkdir plans;
+
     systemd.services = genAttrs' plans (plan: {
       name = "permown.${replaceStrings ["/"] ["_"] plan.path}";
       value = {