diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index dfbf309..59da7f8 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -24,7 +24,7 @@ build-image:
     name: ghcr.io/blue-build/cli:main
     entrypoint: [""]
   services:
-    - docker
+    - docker-dind
   rules:
     - if: $ACTION == "build-image"
   parallel:
@@ -32,9 +32,11 @@ build-image:
       - RECIPE:
           - recipe-jp-desktop-gaming.yml
           - recipe-jp-laptop.yml
-  id_tokens:
-    SIGSTORE_ID_TOKEN:
-      aud: sigstore
+  variables:
+    DOCKER_HOST: tcp://docker:2376
+    DOCKER_TLS_CERTDIR: /certs
+    DOCKER_TLS_VERIFY: 1
+    DOCKER_CERT_PATH: $DOCKER_TLS_CERTDIR/client
   before_script:
     - curl --silent "https://gitlab.com/gitlab-org/incubation-engineering/mobile-devops/download-secure-files/-/raw/main/installer" | bash
     - export COSIGN_PRIVATE_KEY=$(cat .secure_files/cosign.key)