diff --git a/ci/Dockerfile b/ci/Dockerfile
index 3dc231d2..1a4db7cd 100644
--- a/ci/Dockerfile
+++ b/ci/Dockerfile
@@ -1,4 +1,4 @@
-FROM rust:1.85.0 AS builder
+FROM public.ecr.aws/docker/library/rust:1.85.0 AS builder
 
 WORKDIR /app/client
 
@@ -46,7 +46,7 @@ RUN case "${TARGETPLATFORM}" in \
 
 RUN cargo install tokio-console --version 0.1.13 --locked --root /usr/local
 
-FROM alpine:3.20 AS health
+FROM public.ecr.aws/docker/library/alpine:3.20 AS health
 
 ENV GRPC_HEALTH_PROBE_VERSION=v0.4.24
 
@@ -59,12 +59,12 @@ RUN if [ "$(uname -m)" = "ppc64le" ]; then \
     fi && \
     chmod +x /bin/grpc_health_probe
 
-FROM golang:1.24.0-alpine3.20 AS pprof
+FROM public.ecr.aws/docker/library/golang:1.24.0-alpine3.20 AS pprof
 
 RUN go install github.com/google/pprof@latest
 RUN go install github.com/fullstorydev/grpcurl/cmd/grpcurl@latest
 
-FROM debian/debian:bookworm-slim
+FROM public.ecr.aws/debian/debian:bookworm-slim
 
 RUN apt-get update && apt-get install -y --no-install-recommends iperf3 linux-libc-dev libc6-dev \
     iotop sysstat bash-completion procps apache2-utils ca-certificates binutils fio curl \
@@ -80,3 +80,4 @@ COPY --from=pprof /go/bin/grpcurl /bin/grpcurl
 COPY --from=health /bin/grpc_health_probe /bin/grpc_health_probe
 
 ENTRYPOINT ["/usr/local/bin/dfdaemon"]
+
diff --git a/ci/Dockerfile.debug b/ci/Dockerfile.debug
index e67d12bb..96e51b5e 100644
--- a/ci/Dockerfile.debug
+++ b/ci/Dockerfile.debug
@@ -1,4 +1,4 @@
-FROM rust:1.85.0 AS builder
+FROM public.ecr.aws/docker/library/rust:1.85.0 AS builder
 
 WORKDIR /app/client
 
@@ -48,7 +48,7 @@ RUN cargo install flamegraph --version 0.6.8 --root /usr/local
 RUN cargo install bottom --version 0.11.0 --locked --root /usr/local
 RUN cargo install tokio-console --version 0.1.13 --locked --root /usr/local
 
-FROM alpine:3.20 AS health
+FROM public.ecr.aws/docker/library/alpine:3.20 AS health
 
 ENV GRPC_HEALTH_PROBE_VERSION=v0.4.24
 
@@ -61,12 +61,12 @@ RUN if [ "$(uname -m)" = "ppc64le" ]; then \
     fi && \
     chmod +x /bin/grpc_health_probe
 
-FROM golang:1.24.0-alpine3.20 AS pprof
+FROM public.ecr.aws/docker/library/golang:1.24.0-alpine3.20 AS pprof
 
 RUN go install github.com/google/pprof@latest
 RUN go install github.com/fullstorydev/grpcurl/cmd/grpcurl@latest
 
-FROM debian/debian:bookworm-slim
+FROM public.ecr.aws/debian/debian:bookworm-slim
 
 RUN apt-get update && apt-get install -y --no-install-recommends iperf3 fio curl infiniband-diags ibverbs-utils \
     iotop sysstat bash-completion procps apache2-utils ca-certificates binutils bpfcc-tools linux-libc-dev libc6-dev \
@@ -84,3 +84,4 @@ COPY --from=pprof /go/bin/grpcurl /bin/grpcurl
 COPY --from=health /bin/grpc_health_probe /bin/grpc_health_probe
 
 ENTRYPOINT ["/usr/local/bin/dfdaemon"]
+
diff --git a/ci/Dockerfile.dfinit b/ci/Dockerfile.dfinit
index b0806a9d..55c52bc7 100644
--- a/ci/Dockerfile.dfinit
+++ b/ci/Dockerfile.dfinit
@@ -1,4 +1,4 @@
-FROM rust:1.85.0 AS builder
+FROM public.ecr.aws/docker/library/rust:1.85.0 AS builder
 
 RUN apt-get update && apt-get install -y \
     openssl libclang-dev pkg-config protobuf-compiler \
@@ -44,7 +44,7 @@ RUN case "${TARGETPLATFORM}" in \
   esac && \
   cargo build --release --verbose --bin dfinit
 
-FROM debian/debian:bookworm-slim
+FROM public.ecr.aws/debian/debian:bookworm-slim
 
 RUN apt-get update && apt-get install -y --no-install-recommends wget \
     && rm -rf /var/lib/apt/lists/*
@@ -52,3 +52,4 @@ RUN apt-get update && apt-get install -y --no-install-recommends wget \
 COPY --from=builder /app/client/target/release/dfinit /usr/local/bin/dfinit
 
 ENTRYPOINT ["/usr/local/bin/dfinit"]
+