diff --git a/antelope/Dockerfile b/antelope/Dockerfile
index 8fff404..daed7ba 100644
--- a/antelope/Dockerfile
+++ b/antelope/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/vexxhost/ubuntu-cloud-archive:antelope
+FROM ghcr.io/vexxhost/ubuntu-cloud-archive:antelope@sha256:0f4c144692dda2d4d3b43bee990e3d24f9af7c91e8c9bbc4022008dc4d8f4c14
 ENV PATH=/var/lib/openstack/bin:$PATH
 RUN \
   --mount=type=cache,target=/var/cache/apt,sharing=locked \
diff --git a/bobcat/Dockerfile b/bobcat/Dockerfile
index e433639..1eb06cb 100644
--- a/bobcat/Dockerfile
+++ b/bobcat/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/vexxhost/ubuntu-cloud-archive:bobcat
+FROM ghcr.io/vexxhost/ubuntu-cloud-archive:bobcat@sha256:6bdb08e8b439d625fd00f4a2df01df6120478913b55830dfc0b1a16243c56f16
 ENV PATH=/var/lib/openstack/bin:$PATH
 RUN \
   --mount=type=cache,target=/var/cache/apt,sharing=locked \
diff --git a/caracal/Dockerfile b/caracal/Dockerfile
index 61a7a2f..6d167f2 100644
--- a/caracal/Dockerfile
+++ b/caracal/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/vexxhost/ubuntu-cloud-archive:caracal
+FROM ghcr.io/vexxhost/ubuntu-cloud-archive:caracal@sha256:464740a80e8d800f5abd4ada71e299477437d424a27dc2f1a6a04116ec5ce3be
 ENV PATH=/var/lib/openstack/bin:$PATH
 RUN \
   --mount=type=cache,target=/var/cache/apt,sharing=locked \
diff --git a/zed/Dockerfile b/zed/Dockerfile
index dc775a6..ef38de3 100644
--- a/zed/Dockerfile
+++ b/zed/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/vexxhost/ubuntu-cloud-archive:zed
+FROM ghcr.io/vexxhost/ubuntu-cloud-archive:zed@sha256:9338393563234dddb116afbf620dbd43fabd11084bb8fc94ff166a21b08683aa
 ENV PATH=/var/lib/openstack/bin:$PATH
 RUN \
   --mount=type=cache,target=/var/cache/apt,sharing=locked \