diff --git a/Dockerfile b/Dockerfile
index ad6472e1c3c..7a754682ab1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -60,7 +60,7 @@ FROM $LITELLM_RUNTIME_IMAGE AS runtime
 USER root
 
 # Install runtime dependencies (with retry for transient APK mirror errors)
-RUN for i in 1 2 3; do apk add --no-cache bash openssl tzdata nodejs npm libsndfile && break || sleep 5; done && \
+RUN for i in 1 2 3; do apk add --no-cache bash openssl ca-certificates-bundle tzdata nodejs npm libsndfile && break || sleep 5; done && \
     npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 && \
     # SECURITY FIX: npm bundles tar, glob, and brace-expansion at multiple nested
     # levels inside its dependency tree. `npm install -g <pkg>` only creates a
diff --git a/docker/Dockerfile.database b/docker/Dockerfile.database
index fa02e6c346a..239c9a6bcdd 100644
--- a/docker/Dockerfile.database
+++ b/docker/Dockerfile.database
@@ -64,7 +64,7 @@ FROM $LITELLM_RUNTIME_IMAGE AS runtime
 USER root
 
 # Install runtime dependencies (with retry for transient APK mirror errors)
-RUN for i in 1 2 3; do apk add --no-cache bash openssl tzdata nodejs npm libsndfile && break || sleep 5; done && \
+RUN for i in 1 2 3; do apk add --no-cache bash openssl ca-certificates-bundle tzdata nodejs npm libsndfile && break || sleep 5; done && \
     npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 && \
     GLOBAL="$(npm root -g)" && \
     find "$GLOBAL/npm" -type d -name "tar" -path "*/node_modules/tar" | while read d; do \
@@ -124,7 +124,7 @@ RUN sed -i 's/\r$//' docker/entrypoint.sh && chmod +x docker/entrypoint.sh
 RUN sed -i 's/\r$//' docker/prod_entrypoint.sh && chmod +x docker/prod_entrypoint.sh
 EXPOSE 4000/tcp
 
-RUN apk add --no-cache supervisor
+RUN for i in 1 2 3; do apk add --no-cache supervisor && break || sleep 5; done
 COPY docker/supervisord.conf /etc/supervisord.conf
 
 # # Set your entrypoint and command
diff --git a/docker/Dockerfile.non_root b/docker/Dockerfile.non_root
index 2d9f92c32a8..f87f10653f6 100644
--- a/docker/Dockerfile.non_root
+++ b/docker/Dockerfile.non_root
@@ -124,7 +124,7 @@ RUN for i in 1 2 3; do \
     apk upgrade --no-cache && break || sleep 5; \
     done \
   && for i in 1 2 3; do \
-    apk add --no-cache bash openssl tzdata nodejs npm supervisor && break || sleep 5; \
+    apk add --no-cache bash openssl ca-certificates-bundle tzdata nodejs npm supervisor && break || sleep 5; \
     done \
   && npm install -g npm@latest tar@7.5.7 glob@11.1.0 @isaacs/brace-expansion@5.0.1 \
   && GLOBAL="$(npm root -g)" \