diff --git a/main.go b/main.go
index 31a0bbbaf3be24b625cebc3962d6946ff8dcf618..349a7c3eb5a378c04673d6888328c387ac917fa3 100644
--- a/main.go
+++ b/main.go
@@ -87,6 +87,12 @@ func main() {
 		CertBase = "/etc/ssl/certs"
 		KeyBase = "/etc/ssl/private"
 		GroupName = "ssl-cert"
+	} else if OSRelease == "arch" {
+		CertBase = "/etc/ssl/certs"
+		KeyBase = "/etc/ssl/private"
+		GroupName = "root"
+	} else {
+		log.Fatalf("don't know what to do with OS: %v", OSRelease)
 	}
 
 	usage := fmt.Sprintf(`ACME Downloader: