diff --git a/ansible-zammad/inventory/group_vars/all.yml b/ansible-zammad/inventory/group_vars/all.yml
index f9e0d132fc..70ba4ca92d 100644
--- a/ansible-zammad/inventory/group_vars/all.yml
+++ b/ansible-zammad/inventory/group_vars/all.yml
@@ -40,5 +40,7 @@ zammad_letsencrypt_email: abel@guardianproject.info
 monitoring_letsencrypt_email: abel@guardianproject.info
 sysctl_overwrite:
   net.ipv4.ip_forward: 1
+sysctl_unsupported_entries:
+  - kernel.unprivileged_userns_clone
 os_filesystem_whitelist:  # os_hardening is meant to detect when EFI is in use, but doesn't https://github.com/dev-sec/ansible-collection-hardening/issues/288
   - vfat