diff --git a/profiles/usb-iso/default.nix b/profiles/usb-iso/default.nix
index 7c0adae..bc66209 100644
--- a/profiles/usb-iso/default.nix
+++ b/profiles/usb-iso/default.nix
@@ -13,6 +13,10 @@ in
   };
 
   config = lib.mkIf cfg.enable {
+    # binary blobs are needed for ventoy
+    nixpkgs.config.permittedInsecurePackages = [
+      "ventoy-1.1.05"
+    ];
     environment.systemPackages = with pkgs; [
       ventoy-bin-full # general
       woeusb-ng # windows