diff --git a/Makefile b/Makefile
index ef18dfb..0ca723b 100644
--- a/Makefile
+++ b/Makefile
@@ -2,7 +2,7 @@ PROJECT_ROOT := $(shell git rev-parse --show-toplevel)
 GO_FILES := $(shell git ls-files '*.go' '*.sum')
 IMAGE_FILES := $(shell find deploy)
 ARCH ?= linux/amd64
-SYSBOX_SHA ?= cfce811006a27305071b1634ca8fe690392f5dcc205612e7b4e5bde411b7701e
+SYSBOX_SHA ?= f02ffb48eae99d6c884c9aa0378070cc716d028f58e87deec5ae00a41b706fe8
 
 .PHONY: clean
 clean:
diff --git a/deploy/Dockerfile b/deploy/Dockerfile
index bddb9aa..f952dcd 100644
--- a/deploy/Dockerfile
+++ b/deploy/Dockerfile
@@ -2,7 +2,10 @@
 FROM ubuntu:jammy
 
 ARG TARGETARCH
-ARG SYSBOX_SHA="f02ffb48eae99d6c884c9aa0378070cc716d028f58e87deec5ae00a41b706fe8"
+# This should be updated in the Makefile whenever the version is changed. 
+# We don't hardcode it here because we have to be able to build both
+# amd and arm
+ARG SYSBOX_SHA
 ARG SYSBOX_VERSION="0.6.5"
 ARG SYSBOX_DEB="sysbox-ce_$SYSBOX_VERSION-0.linux_$TARGETARCH.deb"