diff --git a/Dockerfile b/Dockerfile
index 72e2516..4558a7e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,6 +10,7 @@ FROM ocaml/opam2@sha256:f7125924dd6632099ff98b2505536fe5f5c36bf0beb24779431bb62b
 RUN git fetch origin && git reset --hard c261c4ee9c1ef032af93483913b60f674d4acdb2 && opam update
 
 RUN sudo apt-get install -y m4 libxen-dev pkg-config
+RUN opam pin add -yn cmdliner 'https://github.com/talex5/cmdliner.git#repro-builds'
 RUN opam install -y vchan xen-gnt mirage-xen-ocaml mirage-xen-minios io-page mirage-xen mirage mirage-nat mirage-qubes
 RUN mkdir /home/opam/qubes-mirage-firewall
 ADD config.ml /home/opam/qubes-mirage-firewall/config.ml
diff --git a/build-with-docker.sh b/build-with-docker.sh
index 2570b28..3f6c59c 100755
--- a/build-with-docker.sh
+++ b/build-with-docker.sh
@@ -5,5 +5,5 @@ docker build -t qubes-mirage-firewall .
 echo Building Firewall...
 docker run --rm -i -v `pwd`:/home/opam/qubes-mirage-firewall qubes-mirage-firewall
 echo "SHA2 of build:   $(sha256sum qubes_firewall.xen)"
-echo "SHA2 last known: 1f72adad30cbd4f8315983240bd150811084cb93d360c14740fadb36394c7aa8"
+echo "SHA2 last known: ce9a16b6f5ce0123f289b3586492f9f4b921f6e788f8e333784545807bb1b0f2"
 echo "(hashes should match for released versions)"