diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index da972fbdb..fc0a1cdfd 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -383,7 +383,7 @@ in
       "brave"  # for the integrated wallet -- as a backup
       # "cantata"  # music player (mpd frontend)
       # "chromium"  # chromium takes hours to build. brave is chromium-based, distributed in binary form, so prefer it.
-      # "cups"
+      "cups"
       "discord"  # x86-only
       # "electrum"
       "element-desktop"
diff --git a/hosts/common/programs/cups.nix b/hosts/common/programs/cups.nix
index 4ae88c43e..de517ae86 100644
--- a/hosts/common/programs/cups.nix
+++ b/hosts/common/programs/cups.nix
@@ -11,11 +11,12 @@ let
 in
 {
   sane.programs.cups = {
+    sandbox.method = null;  #< TODO: sandbox
     suggestedPrograms = [
       "system-config-printer"
     ];
   };
-  sane.programs.system-config-printer = {};
+  sane.programs.system-config-printer.sandbox.method = null;  #< TODO: sandbox
 
   services.printing = lib.mkIf cfg.enabled {
     enable = true;
diff --git a/hosts/common/programs/papers.nix b/hosts/common/programs/papers.nix
index bd9453f2b..e3110294d 100644
--- a/hosts/common/programs/papers.nix
+++ b/hosts/common/programs/papers.nix
@@ -1,3 +1,4 @@
+# TODO: get printing to work under papers. until then, use evince if you need to print!
 { ... }:
 {
   sane.programs.papers = {