diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index 3b54106..6dfa64b 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -51,10 +51,24 @@ jobs:
         run: echo "TAG=$(date +'%Y%m%d.%H%M')-${GITHUB_SHA::7}" >> $GITHUB_OUTPUT
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+        env:
+          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+        run: |
+          # Retry to tolerate transient docker.io timeouts, e.g.
+          # 'Get "https://registry-1.docker.io/v2/": context deadline exceeded'.
+          # Credentials are written to ~/.docker/config.json, which buildx
+          # (docker/build-push-action) reads for the push.
+          for attempt in 1 2 3 4 5; do
+            if echo "$DOCKERHUB_TOKEN" | docker login -u "$DOCKERHUB_USERNAME" --password-stdin; then
+              echo "Logged in to Docker Hub on attempt $attempt"
+              exit 0
+            fi
+            echo "Docker Hub login attempt $attempt failed; retrying in 10s..."
+            sleep 10
+          done
+          echo "::error::Docker Hub login failed after 5 attempts"
+          exit 1
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3