diff --git a/Makefile b/Makefile
index 75f29b9..d08d6f7 100644
--- a/Makefile
+++ b/Makefile
@@ -4,7 +4,7 @@ REGION := us-east-1
 
 include .ci/podman.mk
 
-BUILDER := v3.17.2
+BUILDER := v3.17.3
 PKG := '*'
 CF_DIST := E1YFUJXMCXT2RN
 
diff --git a/kubezero/kubezero/APKBUILD b/kubezero/kubezero/APKBUILD
index 94dca4d..20fb0a7 100644
--- a/kubezero/kubezero/APKBUILD
+++ b/kubezero/kubezero/APKBUILD
@@ -7,8 +7,8 @@ pkgdesc="KubeZero release package"
 url="https://git.zero-downtime.net/ZeroDownTime/alpine-overlay/src/branch/master/kubezero/kubezero"
 arch="noarch"
 license="AGPL-3.0"
-# cri-o uses 1.25 to prevent the cgroup leaks, revert back to matching version with 1.25
 depends="
+	podman
         cri-tools
         cri-o~$pkgver
         kubelet~$pkgver
@@ -17,7 +17,7 @@ depends="
         aws-iam-authenticator~0.6.2
         "
 options="!check"
-#install="$pkgname.post-install"
+install="$pkgname.post-install"
 
 source="
        shared-sys-fs.start
diff --git a/kubezero/kubezero/kubezero.post-install b/kubezero/kubezero/kubezero.post-install
new file mode 100644
index 0000000..3c9a918
--- /dev/null
+++ b/kubezero/kubezero/kubezero.post-install
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+CILIUM=v1.13.1
+MULTUS=v3.9.3
+
+# Pre-Pull CNI images
+podman pull quay.io/cilium/cilium:$CILIUM
+podman pull ghcr.io/k8snetworkplumbingwg/multus-cni:$MULTUS