diff --git a/live-image/mkosi.conf b/live-image/mkosi.conf
index 635d828..46d17c3 100644
--- a/live-image/mkosi.conf
+++ b/live-image/mkosi.conf
@@ -8,7 +8,11 @@
 [Distribution]
 Distribution=debian
 Release=bookworm
-Repositories=main
+# non-free-firmware is where bookworm landed i915 GuC/HuC, iwlwifi,
+# amdgpu, nvidia-*, realtek NIC firmware, etc. — anything we'd want
+# when PXE-booting a random repaired host. Without it i915 wedges
+# on Tiger Lake+ and drags the serial console with it.
+Repositories=main non-free-firmware
 
 [Output]
 Format=directory
@@ -35,6 +39,7 @@ Packages=
     dmidecode
     pciutils
     usbutils
+    firmware-linux-nonfree
 
 # Phase 4 will add: smartmontools stress-ng fio iperf3 lshw lm-sensors