diff --git a/cloudbuild/external.pkr.hcl b/cloudbuild/external.pkr.hcl
index 4292143c..7df2ab77 100644
--- a/cloudbuild/external.pkr.hcl
+++ b/cloudbuild/external.pkr.hcl
@@ -69,7 +69,7 @@ build {
       "curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg",
       "echo \"deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable\" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null",
       "sudo apt-get update",
-      "sudo apt-get install docker-ce=27.2.1 docker-ce-cli=27.2.1 containerd.io=1.7.22 build-essential -y",
+      "sudo apt-get install docker-ce=5:27.2.1-1~debian.12~bookworm docker-ce-cli=5:27.2.1-1~debian.12~bookworm containerd.io=1.7.22-1 build-essential -y",
       "sudo usermod -aG docker $USER",
       "sudo docker version",
       "sudo apt-get install openvswitch-switch-dpdk -y",   # install openvswitch for cisco containers
diff --git a/cloudbuild/internal.pkr.hcl b/cloudbuild/internal.pkr.hcl
index 893f347d..79c5335e 100644
--- a/cloudbuild/internal.pkr.hcl
+++ b/cloudbuild/internal.pkr.hcl
@@ -69,7 +69,7 @@ build {
       "curl -fsSL https://download.docker.com/linux/debian/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg",
       "echo \"deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable\" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null",
       "sudo apt-get update",
-      "sudo apt-get install docker-ce=27.2.1 docker-ce-cli=27.2.1 containerd.io=1.7.22 build-essential -y",
+      "sudo apt-get install docker-ce=5:27.2.1-1~debian.12~bookworm docker-ce-cli=5:27.2.1-1~debian.12~bookworm containerd.io=1.7.22-1 build-essential -y",
       "sudo usermod -aG docker $USER",
       "sudo docker version",
       "sudo apt-get install openvswitch-switch-dpdk -y",   # install openvswitch for cisco containers