diff --git a/Dockerfile.bootstrap b/Dockerfile.bootstrap
index 6055e31..5254c2b 100644
--- a/Dockerfile.bootstrap
+++ b/Dockerfile.bootstrap
@@ -1,4 +1,4 @@
-FROM debian:bookworm-slim
+FROM docker.m.daocloud.io/library/debian:bookworm-slim@sha256:88200866dfff7ea7f5cbcb6ec7c8a701889efe6fe859fe64d6990e4b07ea4171
 
 RUN apt-get update && apt-get install -y --no-install-recommends tini openjdk-17-jre-headless fuse3 zstd curl ca-certificates bash procps && rm -rf /var/lib/apt/lists/*
 WORKDIR /app