diff --git a/dist/docker-images/ziti-cli/Dockerfile b/dist/docker-images/ziti-cli/Dockerfile
index 80da2adf2..c6fbbb3f7 100644
--- a/dist/docker-images/ziti-cli/Dockerfile
+++ b/dist/docker-images/ziti-cli/Dockerfile
@@ -33,7 +33,8 @@ USER root
 ### install packages
 RUN   INSTALL_PKGS="python3.11 python3.11-pip tar bash-completion vim-minimal less shadow-utils jq findutils" && \
       microdnf -y update --setopt=install_weak_deps=0 --setopt=tsflags=nodocs && \
-      microdnf -y install --setopt=install_weak_deps=0 --setopt=tsflags=nodocs ${INSTALL_PKGS}
+      microdnf -y install --setopt=install_weak_deps=0 --setopt=tsflags=nodocs ${INSTALL_PKGS} && \
+      microdnf clean all
 
 ### install OpenShift CLI (oc)
 # FIXME: This repo requires terms acceptance and is only available on registry.redhat.io.
diff --git a/dist/docker-images/ziti-tunnel/Dockerfile b/dist/docker-images/ziti-tunnel/Dockerfile
index eb57033c2..2b0682c61 100644
--- a/dist/docker-images/ziti-tunnel/Dockerfile
+++ b/dist/docker-images/ziti-tunnel/Dockerfile
@@ -18,7 +18,9 @@ LABEL name="openziti/ziti-tunnel" \
 USER root
 RUN   INSTALL_PKGS="util-linux iptables" && \
       microdnf -y update --setopt=install_weak_deps=0 --setopt=tsflags=nodocs && \
-      microdnf -y install --setopt=install_weak_deps=0 --setopt=tsflags=nodocs ${INSTALL_PKGS}
+      microdnf -y install --setopt=install_weak_deps=0 --setopt=tsflags=nodocs ${INSTALL_PKGS} && \
+      microdnf clean all
+
 WORKDIR /netfoundry
 COPY ./entrypoint.sh /
 RUN chmod +x /entrypoint.sh