diff --git a/docker/Dockerfile.hsm b/docker/Dockerfile.hsm
index 61ea6694..8ae1e7c7 100644
--- a/docker/Dockerfile.hsm
+++ b/docker/Dockerfile.hsm
@@ -5,10 +5,9 @@ COPY . .
 
 RUN apt-get update
 RUN apt-get install -y --no-install-recommends \
-        gcc pkgconf libpcsclite-dev
+        gcc pkgconf libpcsclite-dev libcap2-bin
 RUN make V=1 GOFLAGS="" bin/step-ca
-RUN apt-get install -y --no-install-recommends libcap2-bin && \
-    setcap CAP_NET_BIND_SERVICE=+eip bin/step-ca
+RUN setcap CAP_NET_BIND_SERVICE=+eip bin/step-ca
 
 FROM smallstep/step-kms-plugin:bullseye AS kms