diff --git a/recipes/core/base-initfs/recipe.toml b/recipes/core/base-initfs/recipe.toml
index 50198889a6..0d4f4e1adb 100644
--- a/recipes/core/base-initfs/recipe.toml
+++ b/recipes/core/base-initfs/recipe.toml
@@ -8,7 +8,6 @@ version = "0.3.1"
 template = "custom"
 dependencies = [
   "redoxfs",
-  "ion",
   "driver-manager",
   # userutils provides `getty`, copied into the bare initfs from the
   # sysroot below. Without this dependency getty is absent from the
@@ -133,7 +132,9 @@ do
 done
 
 cp "${COOKBOOK_SYSROOT}/usr/bin/redoxfs" "${COOKBOOK_BUILD}/initfs/bin"
-cp "${COOKBOOK_SYSROOT}/usr/bin/ion" "${COOKBOOK_BUILD}/initfs/bin"
+# ion removed: it was only a bundled initfs recovery shell (nothing execs it);
+# not worth holding nix back on old 0.23.1. The interactive login runs from
+# /usr (brush) after switchroot.
 cp "${COOKBOOK_SYSROOT}/usr/bin/driver-manager" "${COOKBOOK_BUILD}/initfs/bin"
 # NB: getty/login are intentionally NOT copied into the initfs. The
 # interactive login runs from /usr after switchroot (config/minimal.toml's