diff --git a/services/maintenance/rpi-resource-reservation-daemonset.yaml b/services/maintenance/rpi-resource-reservation-daemonset.yaml
index 2172afd2..58543ed5 100644
--- a/services/maintenance/rpi-resource-reservation-daemonset.yaml
+++ b/services/maintenance/rpi-resource-reservation-daemonset.yaml
@@ -15,8 +15,9 @@ spec:
       labels:
         app: rpi-resource-reservation
       annotations:
-        atlas.bstein.dev/reservation-revision: "2026-05-19-3"
+        atlas.bstein.dev/reservation-revision: "2026-05-19-4"
     spec:
+      hostPID: true
       serviceAccountName: node-nofile
       nodeSelector:
         node-role.kubernetes.io/worker: "true"
diff --git a/services/maintenance/scripts/rpi_resource_reservation.sh b/services/maintenance/scripts/rpi_resource_reservation.sh
index 86b07c3b..008bc7b2 100644
--- a/services/maintenance/scripts/rpi_resource_reservation.sh
+++ b/services/maintenance/scripts/rpi_resource_reservation.sh
@@ -74,6 +74,7 @@ rm -f "${kubelet_tmp_file}"
 
 override_tmp_file="$(mktemp)"
 cat > "${override_tmp_file}" <<'EOF'
+# Managed by Flux via rpi_resource_reservation.sh revision 2026-05-19-4.
 [Service]
 UnsetEnvironment=K3S_KUBELET_ARG
 ExecStart=
@@ -98,8 +99,8 @@ if [ "${changed}" -eq 1 ]; then
   delay="$(( (RANDOM % 420) + 30 ))"
   echo "updated RPi kubelet reservations; restarting ${unit} after ${delay}s"
   sleep "${delay}"
-  chroot "${host_root}" /bin/systemctl daemon-reload
-  chroot "${host_root}" /bin/systemctl restart "${unit}"
+  nsenter --target 1 --mount --uts --ipc --net --pid -- systemctl daemon-reload
+  nsenter --target 1 --mount --uts --ipc --net --pid -- systemctl restart "${unit}"
 else
   echo "${config_file} already up to date"
 fi