diff --git a/usr/lib/archboot/cpio/hooks/base_common_system b/usr/lib/archboot/cpio/hooks/base_common_system
index fdc7e92c6..d07739e54 100644
--- a/usr/lib/archboot/cpio/hooks/base_common_system
+++ b/usr/lib/archboot/cpio/hooks/base_common_system
@@ -35,16 +35,16 @@ usr/share/{locale/{be,bg,cs,da,de,en_US,el,es,fi,fr,hu,it,lt,lv,mk,nl,nn,pl,pt,r
 var/lib/pacman/local \
 | tar -C "${_ROOTFS}" -xpf -
     fi
-    _map _binary agetty archlinux-keyring-wkd-sync awk basename brotli bsdtar \
+    _map _binary agetty archlinux-keyring-wkd-sync awk bat basename brotli bsdtar \
                  {bus,boot,coredump,hostname,journal,locale,login,machine,network,\
 system,timedate,userdb,home,oom,portable}ctl certutil chmod clear cmsutil crlutil curl date \
                  dbus-{broker{,-launch},cleanup-sockets,daemon,launch,monitor,run-session,send,test-tool,\
-update-activation-environment,uuidgen} dd df dir du false gawk gpg{,-agent,conf,-connect-agent} \
+update-activation-environment,uuidgen} dd df dir du dust eza false fd gawk gpg{,-agent,conf,-connect-agent} \
                  gpgme-{tool,json} insmod install kernel-install kill{,all} loadkeys ldconfig \
                  login makepkg mktemp mkhomedir_helper modutil more mount.ddi mount.nfs{,4} \
                  nano nologin nss-config od p11-kit pk12util pam_timestamp_check pacman{,-conf,-key,-db-upgrade} \
-                 passwd pgrep pidof pinentry{,-curses} pk{action,check,exec,ttyagent} pluginviewer printf ps pwd \
-                 rmdir sasldblistusers2 saslpasswd2 tr true repo-{add,elephant,remove} rbash rmmod secret-tool \
+                 passwd pgrep pidof pinentry{,-curses} pk{action,check,exec,ttyagent} pluginviewer printf procs ps pwd \
+                 rmdir sasldblistusers2 saslpasswd2 tr true repo-{add,elephant,remove} rbash rg rmmod sd secret-tool \
                  shlibsign sign{tool,ver} sort ssltap stat symkeyutil systemd-{ac-power,analyze,ask-password,cat,\
 cgls,cgtop,confextdelta,detect-virt,escape,firstboot,hwdb,inhibit,machine-id-setup,mount,notify,nspawn,path,\
 resolve,repartrun,socket-activate,stdio-bridge,sysusers,tty-ask-password-agent,umount,creds,cryptenroll,dissect,\
diff --git a/usr/lib/archboot/cpio/hooks/firmware b/usr/lib/archboot/cpio/hooks/firmware
index 0a21eb712..f798822a5 100644
--- a/usr/lib/archboot/cpio/hooks/firmware
+++ b/usr/lib/archboot/cpio/hooks/firmware
@@ -8,7 +8,7 @@ _run ()
     tar -C / --exclude=lib/firmware/{agere_*,airoha,amd-ucode,amdtee,amlogic,amphion,ar3k,ar70*,ar9[0-9]*,arm,as102*,\
 atusb,av7110,cadence,cavium,cmmb*,cirrus,cis,cpia2,cnm,ct*,cxgb*,cmmb*,cypress,dabusb,dpaa2,dsp56k,dvb*,\
 edgeport,emi26,emi62,ess,f2255usb*,go7007,hfi1*,INT*,inside-secure,isdbt*,intel{-ucode,/vsc},ixp4xx,keyspan*,\
-korg,lgs8g75*,lt9611uxc*,matrox,meson,microchip,moxa,mts*,myri10ge*,myricom,nxp,ositech,phanfw*,powervr,qat*,\
+korg,lgs8g75*,lt9611uxc*,matrox,meson,microchip,moxa,mrvl/prestera,mts*,myri10ge*,myricom,nxp,ositech,phanfw*,powervr,qat*,\
 qca,r128,r8a*,rockchip,rp2*,rtl_bt,sb16,s2250*,s5p-*,sdd_*,sms1*,sxg,tdmb*,ttusb-budget,ueagle-atm,usbdux*,\
 TAS*,TIAS*,ti,ti-keystone,tlg2300*,tsse_*,v4l*,vicam,vntw*,vxge,wsm_*,wfx,whiteheat*,yam,yamaha,*.txt*,*README*} \
 --hard-dereference -cpf - lib/firmware usr/share/licenses/linux-firmware | tar -C "${_ROOTFS}" -xpf -