diff --git a/meta-oniro-core/conf/distro/oniro-linux.conf b/meta-oniro-core/conf/distro/oniro-linux.conf
index 0223ec28b28314811ee5269962c8ecca7a84a9ef..84278f574ac20433025a33cb57c8fa66c33ec7f0 100644
--- a/meta-oniro-core/conf/distro/oniro-linux.conf
+++ b/meta-oniro-core/conf/distro/oniro-linux.conf
@@ -111,3 +111,12 @@ DISTRO_FEATURES_FILTER_NATIVESDK:append = " openharmony"
 require conf/distro/include/openharmony.inc
 # OpenHarmony requires musl libc, so we cannot allow other TCLIBC values
 TCLIBC:df-openharmony = "musl"
+
+# The libnss configuration file is only installed when glibc is used. The
+# innexistence of it on a musl-based rootfs, will make shadow complain about
+# it.
+IMAGE_LOG_CHECK_EXCLUDES:libc-musl += "Failed opening /etc/nsswitch.conf"
+
+# We run a read-only rootfs but we want shadow because it includes subid
+# configuration used by podman in rootless mode.
+ROOTFS_RO_UNNEEDED:remove = "shadow"