diff --git a/testenv/Dockerfile b/testenv/Dockerfile
index 67fcd748..6373345f 100644
--- a/testenv/Dockerfile
+++ b/testenv/Dockerfile
@@ -8,6 +8,8 @@ RUN echo 'Server = https://mirror.rackspace.com/archlinux/$repo/os/$arch' > /etc
 	&& pacman-key --populate archlinux
 
 RUN pacman --noconfirm --ask=4 -Syy \
+	&& pacman --needed --noconfirm --ask=4 -S \
+		archlinux-keyring \
 	&& pacman --needed --noconfirm --ask=4 -S \
 		glibc \
 		pacman \
@@ -17,7 +19,6 @@ RUN pacman --noconfirm --ask=4 -Syy \
 	&& pacman --noconfirm --ask=4 -Syu \
 	&& pacman --needed --noconfirm --ask=4 -S \
 		p11-kit \
-		archlinux-keyring \
 		ca-certificates \
 		ca-certificates-mozilla \
 		ca-certificates-utils \
diff --git a/testenv/tox.ini b/testenv/tox.ini
index 5ca65f5d..8ebbdb2e 100644
--- a/testenv/tox.ini
+++ b/testenv/tox.ini
@@ -3,7 +3,7 @@ envlist = flake8, pylint, mypy, vulture, pytest, eslint, htmlhint, shellcheck
 skipsdist = true
 
 [testenv]
-basepython = python3.12
+basepython = python3.13
 sitepackages = true
 changedir = /src