diff --git a/sysstat-tmpfiles.conf b/sysstat-tmpfiles.conf
new file mode 100644
index 0000000..ce93986
--- /dev/null
+++ b/sysstat-tmpfiles.conf
@@ -0,0 +1 @@
+d /var/log/sa 0755 root root -
diff --git a/sysstat.spec b/sysstat.spec
index c10534e..7912c72 100644
--- a/sysstat.spec
+++ b/sysstat.spec
@@ -1,11 +1,12 @@
 Summary: Collection of performance monitoring tools for Linux
 Name: sysstat
 Version: 12.7.6
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: GPL-2.0-or-later
 
 URL: http://sebastien.godard.pagesperso-orange.fr
 Source: https://github.com/sysstat/sysstat/archive/v%{version}.tar.gz
+Source1: sysstat-tmpfiles.conf
 
 # PCP is no longer available for %%{ix86} on F40
 %if 0%{?fedora} >= 40 || 0%{?rhel} >= 10
@@ -68,6 +69,10 @@ The cifsiostat command reports I/O statistics for CIFS file systems.
 # Do not install the license as documentation
 rm %{buildroot}%{_docdir}/%{name}/COPYING
 
+# tmpfiles config
+mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}
+install -p -m 644 %SOURCE1 ${RPM_BUILD_ROOT}%{_tmpfilesdir}/%{name}.conf
+
 %post
 %systemd_post sysstat.service sysstat-collect.timer sysstat-summary.timer
 
@@ -108,8 +113,12 @@ fi
 %{_mandir}/man8/sa2.8*
 %{_mandir}/man8/sadc.8*
 %{_localstatedir}/log/sa
+%{_tmpfilesdir}/%{name}.conf
 
 %changelog
+* Mon Dec 01 2025 Lukáš Zaoral <lzaoral@redhat.com> - 12.7.6-3
+- fix creation of /var/log/sa in image mode (RHEL-128566)
+
 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 12.7.6-2
 - Bump release for October 2024 mass rebuild:
   Resolves: RHEL-64018