diff --git a/docker/pbs.Dockerfile b/docker/pbs.Dockerfile
index 52197504..77ce0e8d 100644
--- a/docker/pbs.Dockerfile
+++ b/docker/pbs.Dockerfile
@@ -14,11 +14,16 @@ COPY . .
 RUN cargo build --release --bin default-pbs
 
 
-FROM ubuntu AS runtime
+FROM debian:bookworm-slim AS runtime
 WORKDIR /app
 
-RUN apt-get update
-RUN apt-get install -y openssl ca-certificates libssl3 libssl-dev
+RUN apt-get update && apt-get install -y \
+  openssl \
+  ca-certificates \
+  libssl3 \
+  libssl-dev \
+  && apt-get clean autoclean \
+  && rm -rf /var/lib/apt/lists/*
 
 COPY --from=builder /app/target/release/default-pbs /usr/local/bin
 ENTRYPOINT ["/usr/local/bin/default-pbs"]
diff --git a/docker/signer.Dockerfile b/docker/signer.Dockerfile
index d38917eb..a5de6829 100644
--- a/docker/signer.Dockerfile
+++ b/docker/signer.Dockerfile
@@ -14,11 +14,16 @@ COPY . .
 RUN cargo build --release --bin signer-module
 
 
-FROM ubuntu AS runtime
+FROM debian:bookworm-slim AS runtime
 WORKDIR /app
 
-RUN apt-get update
-RUN apt-get install -y openssl ca-certificates libssl3 libssl-dev
+RUN apt-get update && apt-get install -y \
+  openssl \
+  ca-certificates \
+  libssl3 \
+  libssl-dev \
+  && apt-get clean autoclean \
+  && rm -rf /var/lib/apt/lists/*
 
 COPY --from=builder /app/target/release/signer-module /usr/local/bin
 ENTRYPOINT ["/usr/local/bin/signer-module"]