diff --git a/hw/dixie/analysis.nix b/hw/dixie/analysis.nix
index 0547abf..3af15f9 100644
--- a/hw/dixie/analysis.nix
+++ b/hw/dixie/analysis.nix
@@ -101,6 +101,11 @@ in
       "d /var/lib/dropsonde-analysis 0755 dropsonde dropsonde"
       "d /srv/cold/dropsonde2 0755 dropsonde dropsonde"
       "d /srv/analysis/dropsonde2 0755 dropsonde dropsonde"
+      # rsync created these trees 0700 (dropsonde-only) before --chmod was
+      # added; Z relabels mode+ownership recursively at activation to fix
+      # the existing dirs and files.
+      "Z /srv/cold/dropsonde2 0755 dropsonde dropsonde - -"
+      "Z /srv/analysis/dropsonde2 0755 dropsonde dropsonde - -"
     ];
 
     # --- analysis.slice: bounded, best-effort, below llama-server -------------