diff --git a/rpi/default.nix b/rpi/default.nix
index df52430..e72313c 100644
--- a/rpi/default.nix
+++ b/rpi/default.nix
@@ -334,6 +334,8 @@ in
     };
     hardware.enableRedistributableFirmware = true;
 
+    users.groups = builtins.listToAttrs (map (k: { name = k; value = {}; })
+            ["input" "sudo" "plugdev" "games" "netdev" "gpio" "i2c" "spi"]);
     services = {
       udev.extraRules =
         let shell = "${pkgs.bash}/bin/bash";