diff --git a/hole-punching-tests/Dockerfile b/hole-punching-tests/Dockerfile
index 10e17586583..0fbf0e2f3a3 100644
--- a/hole-punching-tests/Dockerfile
+++ b/hole-punching-tests/Dockerfile
@@ -14,12 +14,10 @@ RUN --mount=type=cache,target=./target \
 RUN --mount=type=cache,target=./target \
     mv ./target/x86_64-unknown-linux-musl/release/hole-punching-tests /usr/local/bin/hole-punching-tests
 
-FROM ubuntu:jammy
+FROM alpine:3
 
 ARG DEBIAN_FRONTEND=noninteractive
-RUN --mount=type=cache,target=/var/cache/apt apt-get update && apt-get install -y iproute2
-# Debugging tools
-RUN --mount=type=cache,target=/var/cache/apt apt-get install -y tcpdump ncat iputils-ping
+RUN --mount=type=cache,target=/var/cache/apk apk add nftables
 
 COPY --from=builder /usr/local/bin/hole-punching-tests /usr/bin/hole-punching-tests
 
diff --git a/hole-punching-tests/docker-compose.yml b/hole-punching-tests/docker-compose.yml
index 25b35cf2d2c..74044a1b6a0 100644
--- a/hole-punching-tests/docker-compose.yml
+++ b/hole-punching-tests/docker-compose.yml
@@ -34,7 +34,7 @@ services:
       dockerfile: ./hole-punching-tests/Dockerfile
       context: ..
     container_name: alice
-    command: ["/bin/bash", "-c", "ip route add 17.0.0.0/16 via 192.168.0.10 dev eth0 && /usr/bin/hole-punching-tests dial"]
+    command: ["/bin/sh", "-c", "ip route add 17.0.0.0/16 via 192.168.0.10 dev eth0 && /usr/bin/hole-punching-tests dial"]
     environment:
       TRANSPORT: tcp
     networks:
@@ -60,7 +60,7 @@ services:
       dockerfile: ./hole-punching-tests/Dockerfile
       context: ..
     container_name: bob
-    command: ["/bin/bash", "-c", "ip route add 17.0.0.0/16 via 192.168.1.10 dev eth0 && /usr/bin/hole-punching-tests listen"]
+    command: ["/bin/sh", "-c", "ip route add 17.0.0.0/16 via 192.168.1.10 dev eth0 && /usr/bin/hole-punching-tests listen"]
     environment:
       TRANSPORT: tcp
     networks: