diff --git a/hosts b/hosts
index e875adc..fe3c4f7 100644
--- a/hosts
+++ b/hosts
@@ -107,6 +107,10 @@ dns0.pyrocufflink.blue
 [radius:children]
 samba-dc
 
+[rw-root]
+build1-aarch64.pyrocufflink.blue
+build2-armv7hl.pyrocufflink.blue
+
 [samba-dc]
 dc0.pyrocufflink.blue
 
diff --git a/vars/applyConfigPolicy.groovy b/vars/applyConfigPolicy.groovy
index 843339d..d134996 100644
--- a/vars/applyConfigPolicy.groovy
+++ b/vars/applyConfigPolicy.groovy
@@ -83,7 +83,7 @@ def stageRemountRO(limit) {
     stage('Remount R/O') {
         ansiblePlaybook \
             playbook: 'remount.yml',
-            limit: limit,
+            limit: limit + ':!rw-root',
             become: true,
             vaultCredentialsId: 'ansible-vault',
             extras: '--diff'