diff --git a/e2e/rust/tests/custom_image.rs b/e2e/rust/tests/custom_image.rs
index 30a61f85..14fc3f47 100644
--- a/e2e/rust/tests/custom_image.rs
+++ b/e2e/rust/tests/custom_image.rs
@@ -15,7 +15,7 @@ use std::io::Write;
 use openshell_e2e::harness::output::strip_ansi;
 use openshell_e2e::harness::sandbox::SandboxGuard;
 
-const DOCKERFILE_CONTENT: &str = r#"FROM python:3.13-slim
+const DOCKERFILE_CONTENT: &str = r#"FROM public.ecr.aws/docker/library/python:3.13-slim
 
 # iproute2 is required for sandbox network namespace isolation.
 RUN apt-get update && apt-get install -y --no-install-recommends iproute2 \
diff --git a/e2e/rust/tests/forward_proxy_l7_bypass.rs b/e2e/rust/tests/forward_proxy_l7_bypass.rs
index 3e913607..fb75176c 100644
--- a/e2e/rust/tests/forward_proxy_l7_bypass.rs
+++ b/e2e/rust/tests/forward_proxy_l7_bypass.rs
@@ -17,7 +17,7 @@ use openshell_e2e::harness::sandbox::SandboxGuard;
 use tempfile::NamedTempFile;
 use tokio::time::{interval, timeout};
 
-const TEST_SERVER_IMAGE: &str = "python:3.13-alpine";
+const TEST_SERVER_IMAGE: &str = "public.ecr.aws/docker/library/python:3.13-alpine";
 
 struct DockerServer {
     port: u16,
@@ -79,7 +79,7 @@ HTTPServer(("0.0.0.0", 8000), Handler).serve_forever()
 
     async fn wait_until_ready(&self) -> Result<(), String> {
         let container_id = self.container_id.clone();
-        timeout(Duration::from_secs(30), async move {
+        timeout(Duration::from_secs(60), async move {
             let mut tick = interval(Duration::from_millis(500));
             loop {
                 tick.tick().await;
@@ -99,7 +99,7 @@ HTTPServer(("0.0.0.0", 8000), Handler).serve_forever()
             }
         })
         .await
-        .map_err(|_| "docker test server did not become ready within 30s".to_string())
+        .map_err(|_| "docker test server did not become ready within 60s".to_string())
     }
 }
 
diff --git a/e2e/rust/tests/host_gateway_alias.rs b/e2e/rust/tests/host_gateway_alias.rs
index 547a9238..fe6a15e7 100644
--- a/e2e/rust/tests/host_gateway_alias.rs
+++ b/e2e/rust/tests/host_gateway_alias.rs
@@ -17,7 +17,7 @@ use tokio::time::{interval, timeout};
 
 const INFERENCE_PROVIDER_NAME: &str = "e2e-host-inference";
 const INFERENCE_PROVIDER_UNREACHABLE_NAME: &str = "e2e-host-inference-unreachable";
-const TEST_SERVER_IMAGE: &str = "python:3.13-alpine";
+const TEST_SERVER_IMAGE: &str = "public.ecr.aws/docker/library/python:3.13-alpine";
 static INFERENCE_ROUTE_LOCK: Mutex<()> = Mutex::new(());
 
 async fn run_cli(args: &[&str]) -> Result<String, String> {
@@ -118,7 +118,7 @@ HTTPServer(("0.0.0.0", 8000), Handler).serve_forever()
 
     async fn wait_until_ready(&self) -> Result<(), String> {
         let container_id = self.container_id.clone();
-        timeout(Duration::from_secs(30), async move {
+        timeout(Duration::from_secs(60), async move {
             let mut tick = interval(Duration::from_millis(500));
             loop {
                 tick.tick().await;
@@ -141,7 +141,7 @@ HTTPServer(("0.0.0.0", 8000), Handler).serve_forever()
         .await
         .map_err(|_| {
             format!(
-                "docker test server {} did not become ready within 30s",
+                "docker test server {} did not become ready within 60s",
                 self.container_id
             )
         })?