diff --git a/bionic/x86/Dockerfile b/bionic/x86/Dockerfile
index 1fa145b4c36951adab3fea5960b7a2782b133191..3d134c2624fe1addc0e39da29340a8ba2b6b7bd5 100644
--- a/bionic/x86/Dockerfile
+++ b/bionic/x86/Dockerfile
@@ -7,7 +7,7 @@ RUN apt-get update \
  && eatmydata apt-get upgrade -y
 
 RUN eatmydata apt-get install -y \
-  sudo wget curl tar expect git \
+  sudo wget curl tar expect git=1:2.17.1-1ubuntu0.9 \
   devscripts build-essential lintian ccache pbuilder aptitude apt-utils
 
 RUN curl https://packages.icinga.com/icinga.key | apt-key add - \
@@ -22,7 +22,6 @@ RUN groupadd -g 1000 build \
 
 RUN git clone https://git.icinga.com/build-docker/scripts.git /usr/local/bin
 RUN icinga-provide-go 386
-RUN sudo -u build -- git config --global --add safe.directory '*'
 USER build
 ENTRYPOINT ["/usr/local/bin/icinga-build-entrypoint"]
 CMD ["icinga-build-package"]
diff --git a/bionic/x86_64/Dockerfile b/bionic/x86_64/Dockerfile
index c06c8924e92cabc40d8e0012a9a4e3afc8fb543d..68270546450556236f8ac0b79abc46b221a22750 100644
--- a/bionic/x86_64/Dockerfile
+++ b/bionic/x86_64/Dockerfile
@@ -15,7 +15,7 @@ RUN apt-get update \
  && eatmydata apt-get upgrade -y
 
 RUN eatmydata apt-get install -y \
-  sudo wget curl tar expect git \
+  sudo wget curl tar expect git=1:2.17.1-1ubuntu0.9 \
   devscripts build-essential lintian ccache pbuilder aptitude apt-utils golang-1.11-go
 
 RUN curl https://packages.icinga.com/icinga.key | apt-key add - \
@@ -30,7 +30,6 @@ RUN groupadd -g 1000 build \
 
 RUN git clone https://git.icinga.com/build-docker/scripts.git /usr/local/bin
 RUN icinga-provide-go
-RUN sudo -u build -- git config --global --add safe.directory '*'
 USER build
 ENTRYPOINT ["/usr/local/bin/icinga-build-entrypoint"]
 CMD ["icinga-build-package"]