diff --git a/examples/aws.yml b/examples/aws.yml
index fded06810..4d026a438 100644
--- a/examples/aws.yml
+++ b/examples/aws.yml
@@ -22,7 +22,7 @@ services:
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/examples/gcp.yml b/examples/gcp.yml
index d28a62d2e..aff38d46d 100644
--- a/examples/gcp.yml
+++ b/examples/gcp.yml
@@ -26,7 +26,7 @@ services:
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/examples/hostmount-writeable-overlay.yml b/examples/hostmount-writeable-overlay.yml
index bb7bbac8b..2383c4354 100644
--- a/examples/hostmount-writeable-overlay.yml
+++ b/examples/hostmount-writeable-overlay.yml
@@ -32,7 +32,7 @@ services:
   - name: rngd
     image: linuxkit/rngd:v0.2
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/examples/openstack.yml b/examples/openstack.yml
index be5421f4d..b19241cae 100644
--- a/examples/openstack.yml
+++ b/examples/openstack.yml
@@ -23,7 +23,7 @@ services:
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/examples/vmware.yml b/examples/vmware.yml
index 7fd55cacb..7ec9cc9e8 100644
--- a/examples/vmware.yml
+++ b/examples/vmware.yml
@@ -19,7 +19,7 @@ services:
   - name: dhcpcd
     image: linuxkit/dhcpcd:v0.2
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/examples/vultr.yml b/examples/vultr.yml
index d28a62d2e..aff38d46d 100644
--- a/examples/vultr.yml
+++ b/examples/vultr.yml
@@ -26,7 +26,7 @@ services:
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/examples/wireguard.yml b/examples/wireguard.yml
index 1247fc887..a6d02e1a6 100644
--- a/examples/wireguard.yml
+++ b/examples/wireguard.yml
@@ -47,7 +47,7 @@ services:
   - name: rngd
     image: linuxkit/rngd:v0.2
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     net: /run/netns/wg0
     capabilities:
      - CAP_NET_BIND_SERVICE
diff --git a/linuxkit.yml b/linuxkit.yml
index e81f86547..329757f5c 100644
--- a/linuxkit.yml
+++ b/linuxkit.yml
@@ -24,7 +24,7 @@ services:
   - name: rngd
     image: linuxkit/rngd:v0.2
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/projects/ima-namespace/ima-namespace.yml b/projects/ima-namespace/ima-namespace.yml
index 688fcd187..198a4fa1f 100644
--- a/projects/ima-namespace/ima-namespace.yml
+++ b/projects/ima-namespace/ima-namespace.yml
@@ -17,7 +17,7 @@ services:
   - name: rngd
     image: linuxkit/rngd:v0.2
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/projects/logging/examples/logging.yml b/projects/logging/examples/logging.yml
index 75914b4fe..740f06902 100644
--- a/projects/logging/examples/logging.yml
+++ b/projects/logging/examples/logging.yml
@@ -17,7 +17,7 @@ services:
   - name: rngd
     image: linuxkit/rngd:v0.2
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
diff --git a/projects/shiftfs/shiftfs.yml b/projects/shiftfs/shiftfs.yml
index cef13766c..c9867c722 100644
--- a/projects/shiftfs/shiftfs.yml
+++ b/projects/shiftfs/shiftfs.yml
@@ -20,7 +20,7 @@ services:
   - name: rngd
     image: linuxkit/rngd:v0.2
   - name: nginx
-    image: nginx:alpine
+    image: nginx:1.13.8-alpine
     capabilities:
      - CAP_NET_BIND_SERVICE
      - CAP_CHOWN