diff --git a/manifests/cliwrap.yaml b/manifests/cliwrap.yaml
index 8a2b7d4692..9d5a7a85d8 100644
--- a/manifests/cliwrap.yaml
+++ b/manifests/cliwrap.yaml
@@ -1,2 +1,5 @@
 # https://github.com/coreos/fedora-coreos-tracker/issues/730
-cliwrap: true
+cliwrap-binaries:
+  - dnf
+  # until https://github.com/coreos/rpm-ostree/issues/4726
+  - kernel-install