diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 531950364..a95327a3f 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,12 +1,10 @@
-image: debian:testing
+# SPDX-License-Identifier: AGPL-3.0-or-later
+image: registry.salsa.debian.org/freedombox-team/plinth:gitlabci
 
 before_script:
   - export DEBIAN_FRONTEND=noninteractive
   - apt-get update
   - apt-get build-dep -y .  # Dependencies of the plinth Debian package
-  - apt-get install -y build-essential  # Build dependencies
-  - apt-get install -y sshpass parted  # Test dependencies
-  - apt-get install -y sudo
   - apt-mark hold fuse fuse3  # not installable in CI environment
   - apt-get install -y $(./run --list-dependencies)  # Module dependencies
 
diff --git a/Dockerfile.gitlabci b/Dockerfile.gitlabci
new file mode 100644
index 000000000..6655b404f
--- /dev/null
+++ b/Dockerfile.gitlabci
@@ -0,0 +1,19 @@
+# SPDX-License-Identifier: AGPL-3.0-or-later
+FROM debian:unstable
+
+USER root
+COPY . /plinth
+WORKDIR /plinth
+
+RUN echo "deb http://deb.debian.org/debian unstable main" > /etc/apt/sources.list
+RUN echo "deb-src http://deb.debian.org/debian unstable main" >> /etc/apt/sources.list
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update
+RUN apt-get build-dep -y .  # Dependencies of the freedombox Debian package
+RUN apt-get install -y build-essential # Build dependencies
+RUN apt-get install -y sshpass parted # Test dependencies
+RUN apt-get install -y sudo
+RUN apt-mark hold fuse fuse3 # not installable in CI environment
+RUN apt-get install -y $(./run --list-dependencies) # Module dependencies