diff --git a/.github/workflows/build-ipk.yml b/.github/workflows/build-ipk.yml
index 684676c..d7c2b68 100644
--- a/.github/workflows/build-ipk.yml
+++ b/.github/workflows/build-ipk.yml
@@ -30,7 +30,8 @@ jobs:
             arch: arm_cortex-a7_neon-vfpv4
           - target: mediatek/filogic
             arch: aarch64_cortex-a53
-    runs-on: ubuntu-latest
+    # 26.04: the OpenWrt SDK refuses its non-GNU install
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v7
 
diff --git a/.github/workflows/build-rpm-x86-64.yml b/.github/workflows/build-rpm-x86-64.yml
index 16903d1..dda1fb4 100644
--- a/.github/workflows/build-rpm-x86-64.yml
+++ b/.github/workflows/build-rpm-x86-64.yml
@@ -18,7 +18,8 @@ jobs:
     strategy:
       matrix:
         target:
-          - ubuntu-latest
+          # 26.04: rpm 6 runs %__gpg_sign_cmd differently, signing fails
+          - ubuntu-24.04
     runs-on: ${{ matrix.target }}
     steps:
     - uses: actions/checkout@v7