diff --git a/nix/configuration/roles/gpg/default.nix b/nix/configuration/roles/gpg/default.nix
index e9f0781..4abc005 100644
--- a/nix/configuration/roles/gpg/default.nix
+++ b/nix/configuration/roles/gpg/default.nix
@@ -125,5 +125,17 @@ in
     ];
 
     programs.gnupg.agent.enableExtraSocket = true;
+
+    nixpkgs.overlays = [
+      (final: prev: {
+        # This package creates /etc/udev/rules.d/70-u2f.rules referencing a legacy group "plugdev". This overlay removes those references. ref: https://gitlab.archlinux.org/archlinux/packaging/packages/probe-rs/-/work_items/4
+        libfido2 = prev.libfido2.overrideAttrs (old: {
+          postPatch = (old.postPatch or "") + ''
+            substituteInPlace udev/70-u2f.rules \
+                --replace-fail ', GROUP="plugdev"' ""
+          '';
+        });
+      })
+    ];
   };
 }