diff --git a/onchain/Dockerfile b/onchain/Dockerfile
index cd4d98e2..bbc10de0 100644
--- a/onchain/Dockerfile
+++ b/onchain/Dockerfile
@@ -11,16 +11,17 @@
 # the License.
 
 # syntax=docker.io/docker/dockerfile:1.4
-FROM node:16.17.0-alpine3.15 as base
+ARG NODEJS_VERSION=18.16.0
+FROM node:${NODEJS_VERSION}-bullseye as base
 
 # this stage installs system dependencies for building the node projects
 FROM base as builder
 
 # install git and python3
 RUN <<EOF
-apk update
-apk add --no-cache g++ git make python3
-rm -rf /var/cache/apk/*
+apt-get update
+apt-get install -y git
+rm -rf /var/lib/apt/lists/*
 EOF
 
 WORKDIR /app
@@ -48,7 +49,7 @@ RUN yarn build
 RUN npm install -g .
 
 # this stage is runtime image for rollups (hardhat)
-FROM base as hardhat
+FROM node:${NODEJS_VERSION}-bullseye-slim as hardhat
 
 # copy yarn build
 COPY --from=rollups-builder /app /app
@@ -61,6 +62,6 @@ ENTRYPOINT ["npx", "hardhat"]
 CMD ["node"]
 
 # this stage is runtime for rollups-cli (built with esbuild)
-FROM base as cli
+FROM node:${NODEJS_VERSION}-bullseye-slim as cli
 COPY --from=cli-builder /usr/local/bin/cartesi-rollups /usr/local/bin/
 ENTRYPOINT ["cartesi-rollups"]