diff --git a/tools/ci-build/Dockerfile b/tools/ci-build/Dockerfile
index f5ed4869d9..7c957b4f17 100644
--- a/tools/ci-build/Dockerfile
+++ b/tools/ci-build/Dockerfile
@@ -86,6 +86,9 @@ RUN set -eux; \
     cargo +${rust_nightly_version} -Z sparse-registry install --locked --path tools/ci-build/difftags; \
     cargo +${rust_nightly_version} -Z sparse-registry install --locked --path tools/ci-build/sdk-lints; \
     cargo +${rust_nightly_version} -Z sparse-registry install --locked --path tools/ci-build/sdk-versioner; \
+    mkdir -p /opt/cargo/git/db; \
+    chmod g+rw -R /opt/cargo/git; \
+    chmod g+rw -R /opt/cargo/bin; \
     chmod g+rw -R /opt/cargo/registry
 
 FROM install_rust AS cargo_deny