diff --git a/build/root/WORKSPACE b/build/root/WORKSPACE
index f8d818d97c4..4cc85d2a3eb 100644
--- a/build/root/WORKSPACE
+++ b/build/root/WORKSPACE
@@ -29,11 +29,12 @@ repo_infra_configure(
 
 repo_infra_go_repositories()
 
+# begin setup rules_docker
 http_archive(
     name = "io_bazel_rules_docker",
-    sha256 = "aed1c249d4ec8f703edddf35cbe9dfaca0b5f5ea6e4cd9e83e99f3b0d1136c3d",
-    strip_prefix = "rules_docker-0.7.0",
-    urls = mirror("https://github.com/bazelbuild/rules_docker/archive/v0.7.0.tar.gz"),
+    sha256 = "4521794f0fba2e20f3bf15846ab5e01d5332e587e9ce81629c7f96c793bb7036",
+    strip_prefix = "rules_docker-0.14.4",
+    urls = mirror("https://github.com/bazelbuild/rules_docker/releases/download/v0.14.4/rules_docker-v0.14.4.tar.gz"),
 )
 
 load(
@@ -43,7 +44,20 @@ load(
 
 container_repositories()
 
-load("@io_bazel_rules_docker//container:container.bzl", "container_pull")
+load("@io_bazel_rules_docker//repositories:deps.bzl", container_deps = "deps")
+
+container_deps()
+
+load("@io_bazel_rules_docker//repositories:pip_repositories.bzl", "pip_deps")
+
+pip_deps()
+
+load(
+    "@io_bazel_rules_docker//container:container.bzl",
+    "container_pull",
+)
+
+# end setup rules_docker
 
 container_pull(
     name = "distroless_base",