diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 79c0db6..08e6d0c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -12,9 +12,6 @@ build:image:
     matrix:
       - ARCH: ["x86_64-linux", "aarch64-linux"]
   image: nixpkgs/nix-flakes:latest
-  before_script:
-    - nix profile install nixpkgs#buildah
-    - export PATH="$PATH:$HOME/.nix-profile/bin"
   script:
     - nix build .#image --system $ARCH
   after_script:
@@ -27,6 +24,8 @@ deploy:image:
   needs:
     - build:image
   before_script:
+    - nix profile install nixpkgs#buildah
+    - export PATH="$PATH:$HOME/.nix-profile/bin"
     - export REGISTRY_AUTH_FILE=''${HOME}/auth.json
     - echo "$CI_REGISTRY_PASSWORD" | buildah login -u "$CI_REGISTRY_USER" --password-stdin $CI_REGISTRY
     - mkdir -p /etc/containers && echo '{"default":[{"type":"insecureAcceptAnything"}]}' > /etc/containers/policy.json