diff --git a/packages/static/kairos-overlay-files/files/system/oem/00_rootfs.yaml b/packages/static/kairos-overlay-files/files/system/oem/00_rootfs.yaml
index 24cc99b..c07c6c1 100644
--- a/packages/static/kairos-overlay-files/files/system/oem/00_rootfs.yaml
+++ b/packages/static/kairos-overlay-files/files/system/oem/00_rootfs.yaml
@@ -16,36 +16,37 @@ stages:
         OVERLAY: "tmpfs:25%"
         RW_PATHS: "/var /etc /srv"
         PERSISTENT_STATE_PATHS: >-
-          /etc/systemd
+          /etc/cni
+          /etc/init.d
+          /etc/iscsi
+          /etc/kubernetes
           /etc/modprobe.d
           /etc/rancher
-          /etc/sysconfig
           /etc/runlevels
           /etc/ssh
           /etc/ssl/certs
-          /etc/iscsi
+          /etc/sysconfig
+          /etc/systemd
           /etc/zfs
-          /etc/cni
-          /etc/kubernetes
           /home
           /opt
           /root
           /snap
-          /var/snap
           /usr/libexec
-          /var/log
-          /var/lib/containerd
-          /var/lib/extensions
-          /var/lib/rancher
-          /var/lib/kubelet
-          /var/lib/snapd
-          /var/lib/wicked
-          /var/lib/longhorn
-          /var/lib/cni
-          /var/lib/dbus
           /usr/share/pki/trust
           /usr/share/pki/trust/anchors
           /var/lib/ca-certificates
+          /var/lib/cni
+          /var/lib/containerd
+          /var/lib/dbus
+          /var/lib/extensions
+          /var/lib/kubelet
+          /var/lib/longhorn
+          /var/lib/rancher
+          /var/lib/snapd
+          /var/lib/wicked
+          /var/log
+          /var/snap
         PERSISTENT_STATE_BIND: "true"
     - if: '[ -f "/run/cos/recovery_mode" ]'
       # omit the persistent partition on recovery mode
@@ -61,33 +62,34 @@ stages:
         OVERLAY: "tmpfs:25%"
         RW_PATHS: "/var /etc /srv"
         PERSISTENT_STATE_PATHS: >-
-          /etc/systemd
+          /etc/cni
+          /etc/init.d
+          /etc/iscsi
+          /etc/kubernetes
           /etc/modprobe.d
           /etc/rancher
-          /etc/sysconfig
           /etc/runlevels
           /etc/ssh
           /etc/ssl/certs
-          /etc/iscsi
-          /etc/cni
-          /etc/kubernetes
+          /etc/sysconfig
+          /etc/systemd
           /home
           /opt
           /root
           /snap
-          /var/snap
           /usr/libexec
-          /var/log
-          /var/lib/containerd
-          /var/lib/rancher
-          /var/lib/kubelet
-          /var/lib/snapd
-          /var/lib/wicked
-          /var/lib/longhorn
-          /var/lib/cni
           /usr/share/pki/trust
           /usr/share/pki/trust/anchors
           /var/lib/ca-certificates
+          /var/lib/cni
+          /var/lib/containerd
+          /var/lib/kubelet
+          /var/lib/longhorn
+          /var/lib/rancher
+          /var/lib/snapd
+          /var/lib/wicked
+          /var/log
+          /var/snap
         PERSISTENT_STATE_BIND: "true"
   rootfs.after:
     - if: '[ -r /run/cos/custom-layout.env ] && [ ! -f "/run/cos/recovery_mode" ] && [ ! -f /run/cos/live_mode ]'
diff --git a/packages/static/kairos-overlay-files/files/system/oem/00_rootfs_uki.yaml b/packages/static/kairos-overlay-files/files/system/oem/00_rootfs_uki.yaml
index efbf74e..ecb7a7e 100644
--- a/packages/static/kairos-overlay-files/files/system/oem/00_rootfs_uki.yaml
+++ b/packages/static/kairos-overlay-files/files/system/oem/00_rootfs_uki.yaml
@@ -16,36 +16,36 @@ stages:
         RW_PATHS: "/var /etc /srv"
         OVERLAY: "tmpfs:25%"
         PERSISTENT_STATE_PATHS: >-
-          /etc/systemd
+          /etc/cni
+          /etc/iscsi
+          /etc/kubernetes
           /etc/modprobe.d
           /etc/rancher
-          /etc/sysconfig
           /etc/runlevels
           /etc/ssh
           /etc/ssl/certs
-          /etc/iscsi
+          /etc/sysconfig
+          /etc/systemd
           /etc/zfs
-          /etc/cni
-          /etc/kubernetes
           /home
           /opt
           /root
           /snap
-          /var/snap
           /usr/libexec
-          /var/log
-          /var/lib/containerd
-          /var/lib/extensions
-          /var/lib/rancher
-          /var/lib/kubelet
-          /var/lib/snapd
-          /var/lib/wicked
-          /var/lib/longhorn
-          /var/lib/cni
-          /var/lib/dbus
           /usr/share/pki/trust
           /usr/share/pki/trust/anchors
           /var/lib/ca-certificates
+          /var/lib/cni
+          /var/lib/containerd
+          /var/lib/dbus
+          /var/lib/extensions
+          /var/lib/kubelet
+          /var/lib/longhorn
+          /var/lib/rancher
+          /var/lib/snapd
+          /var/lib/wicked
+          /var/log
+          /var/snap
     - if: '[ -e "/run/cos/uki_install_mode" ]'
       # omit everything on installer, just set the ephemeral paths
       name: "Layout configuration for UKI installer"