diff --git a/src/Nocr.Users.Host/Dockerfile b/src/Nocr.Users.Host/Dockerfile
index a9b1526..551cd20 100644
--- a/src/Nocr.Users.Host/Dockerfile
+++ b/src/Nocr.Users.Host/Dockerfile
@@ -5,7 +5,13 @@ RUN apt-get install -y curl && rm -rf /var/lib/apt/lists/*
 
 FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 WORKDIR /src
-RUN apt-get update && apt-get install -y ca-certificates && update-ca-certificates
+
+# Install and update CA certificates FIRST before any network operations
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates && \
+    update-ca-certificates && \
+    rm -rf /var/lib/apt/lists/*
+
 COPY . .
 
 # Create NuGet.Config with package source mapping to avoid NU1507 warnings
@@ -24,8 +30,10 @@ RUN mkdir -p /root/.nuget/NuGet && \
     echo '      <package pattern="*" />' >> /root/.nuget/NuGet/NuGet.Config && \
     echo '    </packageSource>' >> /root/.nuget/NuGet/NuGet.Config && \
     echo '  </packageSourceMapping>' >> /root/.nuget/NuGet/NuGet.Config && \
-    echo '</configuration>' >> /root/.nuget/NuGet/NuGet.Config 
-RUN dotnet restore "src/Nocr.Users.Host/Nocr.Users.Host.csproj"
+    echo '</configuration>' >> /root/.nuget/NuGet/NuGet.Config
+
+# Restore with verbose logging to see what's happening
+RUN dotnet restore "src/Nocr.Users.Host/Nocr.Users.Host.csproj" --verbosity normal
 WORKDIR "/src/src/Nocr.Users.Host"
 RUN dotnet build "Nocr.Users.Host.csproj" -c Release -o /app/build
 
diff --git a/src/Nocr.Users.Migrator/Dockerfile b/src/Nocr.Users.Migrator/Dockerfile
index 5d938b9..f98a5af 100644
--- a/src/Nocr.Users.Migrator/Dockerfile
+++ b/src/Nocr.Users.Migrator/Dockerfile
@@ -5,7 +5,13 @@ RUN apt-get install -y curl && rm -rf /var/lib/apt/lists/*
 
 FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 WORKDIR /src
-RUN apt-get update && apt-get install -y ca-certificates && update-ca-certificates
+
+# Install and update CA certificates FIRST before any network operations
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates && \
+    update-ca-certificates && \
+    rm -rf /var/lib/apt/lists/*
+
 COPY . .
 
 # Create NuGet.Config with package source mapping to avoid NU1507 warnings
@@ -24,8 +30,10 @@ RUN mkdir -p /root/.nuget/NuGet && \
     echo '      <package pattern="*" />' >> /root/.nuget/NuGet/NuGet.Config && \
     echo '    </packageSource>' >> /root/.nuget/NuGet/NuGet.Config && \
     echo '  </packageSourceMapping>' >> /root/.nuget/NuGet/NuGet.Config && \
-    echo '</configuration>' >> /root/.nuget/NuGet/NuGet.Config 
-RUN dotnet restore "src/Nocr.Users.Migrator/Nocr.Users.Migrator.csproj"
+    echo '</configuration>' >> /root/.nuget/NuGet/NuGet.Config
+
+# Restore with verbose logging to see what's happening
+RUN dotnet restore "src/Nocr.Users.Migrator/Nocr.Users.Migrator.csproj" --verbosity normal
 WORKDIR "/src/src/Nocr.Users.Migrator"
 RUN dotnet build "Nocr.Users.Migrator.csproj" -c Release -o /app/build