diff --git a/Dockerfile b/Dockerfile
index e54f41d..52dd4ec 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -12,19 +12,23 @@ RUN apt-get update \
 WORKDIR /app
 
 COPY package.json package-lock.json ./
-# Compile against this image's glibc, then remove prebuilds — better-sqlite3
-# always prefers prebuilds/ over build/Release, and published linux-arm64
-# prebuilds can require a newer GLIBC than bookworm provides.
+# better-sqlite3 ships linux-arm64 prebuilds that need GLIBC >= 2.38; bookworm
+# has 2.36. Its gypfile skips compiling when a prebuild exists unless
+# --force_build=1. Remove prebuilds, then compile against this image's glibc.
 RUN npm ci \
-  && npm rebuild better-sqlite3 --build-from-source \
+  && npm install --no-save --no-audit --no-fund node-gyp \
   && rm -rf node_modules/better-sqlite3/prebuilds \
+  && cd node_modules/better-sqlite3 \
+  && npx node-gyp rebuild --release --force_build=1 \
+  && cd /app \
   && test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node
 
 COPY web ./web
 COPY src ./src
 RUN npm run build:web \
   && npm prune --omit=dev \
-  && test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node
+  && test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node \
+  && test ! -d node_modules/better-sqlite3/prebuilds
 
 FROM node:22-bookworm-slim AS runner