diff --git a/mkosi.extra/usr/lib/tmpfiles.d/var.conf b/mkosi.extra/usr/lib/tmpfiles.d/var.conf
new file mode 100644
index 0000000..4e38bda
--- /dev/null
+++ b/mkosi.extra/usr/lib/tmpfiles.d/var.conf
@@ -0,0 +1,6 @@
+# SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL
+# SPDX-FileCopyrightText: none
+
+# WARNING: do not rename this file! It overrides a potential var.conf from systemd. Also see etc.conf.
+
+C /var/lib/flatpak - - - - -
diff --git a/mkosi.finalize.d/99-var.sh.chroot b/mkosi.finalize.d/99-var.sh.chroot
new file mode 100755
index 0000000..f6e97da
--- /dev/null
+++ b/mkosi.finalize.d/99-var.sh.chroot
@@ -0,0 +1,9 @@
+#!/bin/sh
+# SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL
+# SPDX-FileCopyrightText: 2025 Harald Sitter <sitter@kde.org>
+
+set -eux
+
+# Copy /var/lib/flatpak into factory dir for tmpfiles.d (see tmpfiles.d docs).
+[ -d /usr/share/factory/var/lib ] || mkdir --parents /usr/share/factory/var/lib
+cp --archive --no-target-directory --update=none /var/lib/flatpak /usr/share/factory/var/lib/flatpak