diff --git a/docker/Dockerfile b/docker/Dockerfile
index 60ccc6f..2af89cc 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -20,7 +20,9 @@ RUN set -e; entry=$(ls /app/*.deps.json | head -1 | sed 's/\.deps\.json$//'); \
 # ---- 运行阶段 ----
 FROM mcr.microsoft.com/dotnet/aspnet:${DOTNET_VERSION} AS runtime
 # curl 供 projman compose healthcheck（test: CMD curl -f ...）使用；tzdata 设上海时区
-RUN apt-get update \
+RUN sed -i 's|deb.debian.org|archive.debian.org|g; s|security.debian.org|archive.debian.org|g' /etc/apt/sources.list \
+ && echo 'Acquire::Check-Valid-Until "false";' > /etc/apt/apt.conf.d/99no-valid-until \
+ && apt-get update \
  && apt-get install -y --no-install-recommends curl tzdata \
  && ln -snf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
  && echo "Asia/Shanghai" > /etc/timezone \