diff --git a/os-image/base/24.04/Dockerfile b/os-image/base/24.04/Dockerfile
index 0a49571..1f9e626 100644
--- a/os-image/base/24.04/Dockerfile
+++ b/os-image/base/24.04/Dockerfile
@@ -80,7 +80,9 @@ RUN --mount=type=secret,id=sandbox_install_agent \
       'WantedBy=sysinit.target' \
       > /etc/systemd/system/silkd.service && \
     systemctl enable silkd.service && \
-    rm -rf /var/lib/apt/lists/*
+    rm -rf /var/lib/apt/lists/* && \
+    # [Apt] HTTPS mirrors for the shipped image: Canonical's port-80 frontends drop out at times; 443 stays up.
+    sed -i 's|http://|https://|g' /etc/apt/sources.list.d/ubuntu.sources
 
 COPY --from=boot /boot/ /boot/
 COPY --chmod=0755 --from=silkd /silkd /usr/local/bin/silkd