diff --git a/pkg/containerd/Dockerfile b/pkg/containerd/Dockerfile
index 1c85f4a76..a7cfc54c1 100644
--- a/pkg/containerd/Dockerfile
+++ b/pkg/containerd/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:27df8a8be139cd19cd7348c21efca8843b424f2b as alpine
+FROM linuxkit/alpine:3fdc49366257e53276c6f363956a4353f95d9a81 as alpine
 RUN apk add tzdata
 
 WORKDIR $GOPATH/src/github.com/containerd/containerd
diff --git a/pkg/init/Dockerfile b/pkg/init/Dockerfile
index 8e4bd30cf..3e7a683ef 100644
--- a/pkg/init/Dockerfile
+++ b/pkg/init/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:27df8a8be139cd19cd7348c21efca8843b424f2b AS build
+FROM linuxkit/alpine:3fdc49366257e53276c6f363956a4353f95d9a81 AS build
 RUN apk add --no-cache --initdb alpine-baselayout make gcc musl-dev git linux-headers
 
 ADD usermode-helper.c ./
@@ -16,7 +16,7 @@ RUN mkdir /tmp/bin && cd /tmp/bin/ && cp /go/bin/rc.init . && ln -s rc.init rc.s
 RUN cd /go/src/cmd/service && ./skanky-vendor.sh $GOPATH/src/github.com/containerd/containerd
 RUN go-compile.sh /go/src/cmd/service
 
-FROM linuxkit/alpine:27df8a8be139cd19cd7348c21efca8843b424f2b AS mirror
+FROM linuxkit/alpine:3fdc49366257e53276c6f363956a4353f95d9a81 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out alpine-baselayout busybox musl
 
diff --git a/test/pkg/containerd/Dockerfile b/test/pkg/containerd/Dockerfile
index 39d11b003..ebe73a109 100644
--- a/test/pkg/containerd/Dockerfile
+++ b/test/pkg/containerd/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:27df8a8be139cd19cd7348c21efca8843b424f2b AS mirror
+FROM linuxkit/alpine:3fdc49366257e53276c6f363956a4353f95d9a81 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 # btrfs-progfs is required for btrfs test (mkfs.btrfs)
 # util-linux is required for btrfs test (losetup)