diff --git a/dracut-module-setup.sh b/dracut-module-setup.sh
index 2673a87..cb3d8d4 100755
--- a/dracut-module-setup.sh
+++ b/dracut-module-setup.sh
@@ -1186,6 +1186,13 @@ $CRYPTSETUP_PATH luksOpen --volume-key-keyring \
 EOF
     done
 
+    # latest systemd makes /usr read-only by default
+    mkdir -p "${initdir}/etc/systemd/system.conf.d"
+    cat << EOF > "${initdir}/etc/systemd/system.conf.d/kdump_luks.conf"
+[Manager]
+ProtectSystem=false
+EOF
+
     dracut_need_initqueue
 }