diff --git a/configuration/activate-configuration.sh b/configuration/activate-configuration.sh
index 680af9570ec..4a64be2cd4b 100644
--- a/configuration/activate-configuration.sh
+++ b/configuration/activate-configuration.sh
@@ -55,6 +55,12 @@ if ! test -e /etc/passwd; then
 fi
 
 
+# Some more required accounts/groups.
+if ! getent group nogroup > /dev/null; then
+    groupadd -g 65534 nogroup
+fi
+
+
 # Set up Nix accounts.
 if test -z "@readOnlyRoot@"; then
 
@@ -62,10 +68,6 @@ if test -z "@readOnlyRoot@"; then
         groupadd -g 30000 nixbld
     fi
 
-    if ! getent group nogroup > /dev/null; then
-        groupadd -g 65534 nogroup
-    fi
-
     for i in $(seq 1 10); do
         account=nixbld$i
         if ! getent passwd $account > /dev/null; then