diff --git a/Dockerfile b/Dockerfile
index c6c20b0..60d65ca 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,6 +20,8 @@
 
 FROM opensuse/tumbleweed:latest
 
+RUN set -euo pipefail; zypper -n in --no-recommends osc expect obs-service-format_spec_file obs-service-source_validator typescript git openSUSE-release openSUSE-release-appliance-docker; zypper -n clean; rm -rf /var/log/{lastlog,tallylog,zypper.log,zypp/history,YaST2}
+
 # Define labels according to https://en.opensuse.org/Building_derived_containers
 # labelprefix=org.opensuse.bci.gitea-runner
 LABEL org.opencontainers.image.authors="openSUSE (https://www.opensuse.org/)"
@@ -37,7 +39,5 @@ LABEL org.opensuse.lifecycle-url="https://en.opensuse.org/Lifetime#openSUSE_BCI"
 LABEL org.opensuse.release-stage="released"
 # endlabelprefix
 LABEL io.artifacthub.package.readme-url="https://raw.githubusercontent.com/SUSE/BCI-dockerfile-generator/Tumbleweed/gitea-runner-image/README.md"
-
-RUN set -euo pipefail; zypper -n in --no-recommends osc expect obs-service-format_spec_file obs-service-source_validator typescript git openSUSE-release openSUSE-release-appliance-docker; zypper -n clean; rm -rf /var/log/{lastlog,tallylog,zypper.log,zypp/history,YaST2}
 COPY osc_checkout /usr/bin/osc_checkout
 RUN set -euo pipefail; chmod +x /usr/bin/osc_checkout
diff --git a/gitea-runner-image.changes b/gitea-runner-image.changes
index 0302b73..f3a39d7 100644
--- a/gitea-runner-image.changes
+++ b/gitea-runner-image.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Aug 14 12:30:32 UTC 2024 - Dirk Mueller <dmueller@suse.com>
+
+- install packages first
+
 -------------------------------------------------------------------
 Thu Aug  8 19:28:10 UTC 2024 - Dirk Mueller <dmueller@suse.com>