diff --git a/alpine.lua b/alpine.lua
index 4f66005..7bdc11c 100644
--- a/alpine.lua
+++ b/alpine.lua
@@ -101,9 +101,9 @@ function alpine.make_world(rootfs_path, packages)
 
 	local status = os.execute("doas apk update --no-cache --root "..rootfs_path)
 	if not (status == 0) then return status end
-	local status = os.execute("doas apk upgrade --no-cache --root "..rootfs_path)
+	local status = os.execute("doas apk upgrade --clean-protected --no-cache --root "..rootfs_path)
 	if not (status == 0) then return status end
-	local status = os.execute("doas apk add --no-cache --root "..rootfs_path)
+	local status = os.execute("doas apk add --clean-protected --no-cache --root "..rootfs_path)
 	if not (status == 0) then return status end
 end