diff --git a/pkgs/servers/dns/knot-resolver/default.nix b/pkgs/servers/dns/knot-resolver/default.nix
index 6ebd642ee35..bfa610b57d8 100644
--- a/pkgs/servers/dns/knot-resolver/default.nix
+++ b/pkgs/servers/dns/knot-resolver/default.nix
@@ -62,7 +62,11 @@ unwrapped = stdenv.mkDerivation rec {
 };
 
 wrapped-full = with luajitPackages; let
-    luaPkgs =  [ luasec luasocket ]; # TODO: cqueues and others for http2 module
+    luaPkgs =  [
+      luasec luasocket # trust anchor bootstrap, prefill module
+      lfs # prefill module
+      # TODO: cqueues and others for http2 module
+    ];
   in runCommand unwrapped.name
   {
     nativeBuildInputs = [ makeWrapper ];