diff --git a/src/external/ocaml-rocksdb/dune b/src/external/ocaml-rocksdb/dune
index f3309f03eb3..3525e4c342a 100644
--- a/src/external/ocaml-rocksdb/dune
+++ b/src/external/ocaml-rocksdb/dune
@@ -15,9 +15,10 @@
  (libraries dune.configurator)
  )
 
+;; todo: fails with sandbox, since the generated flags are opaque to dune
 (rule
  (targets flags.sexp)
- (deps librocksdb_stubs.a)
+ (deps librocksdb_stubs.a (sandbox none))
  (action (run ./rocks_linker_flags_gen.exe)))
 
 (rule
diff --git a/src/lib/mina_version/normal/dune b/src/lib/mina_version/normal/dune
index b55a72b55a5..753e13d2d05 100644
--- a/src/lib/mina_version/normal/dune
+++ b/src/lib/mina_version/normal/dune
@@ -8,5 +8,8 @@
 
 (rule
  (targets mina_version.ml)
- (deps (:< gen.sh) (universe))
+ (deps
+   (sandbox none)
+   (:< gen.sh)
+   (universe))
  (action (run %{<} %{targets})))