diff --git a/.cirrus.yml b/.cirrus.yml
index b71049c161..bde179a35a 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -32,7 +32,7 @@ env:
     DEBIAN_NAME: "debian-12"
 
     # Image identifiers
-    IMAGE_SUFFIX: "c20230307t192532z-f37f36d12"
+    IMAGE_SUFFIX: "c20230405t152256z-f37f36d12"
     # EC2 images
     FEDORA_AMI: "fedora-aws-${IMAGE_SUFFIX}"
     FEDORA_AARCH64_AMI: "fedora-podman-aws-arm64-${IMAGE_SUFFIX}"
diff --git a/contrib/cirrus/setup_environment.sh b/contrib/cirrus/setup_environment.sh
index 436024ef69..b24566e12c 100755
--- a/contrib/cirrus/setup_environment.sh
+++ b/contrib/cirrus/setup_environment.sh
@@ -122,7 +122,12 @@ fi
 
 # Which distribution are we testing on.
 case "$OS_RELEASE_ID" in
-    debian) ;;
+    debian)
+        # FIXME 2023-04-11: workaround for runc regression causing failure
+        # in system tests: "skipping device /dev/char/10:200 for systemd"
+        # FIXME: please remove this once runc >= 1.2 makes it into debian.
+        modprobe tun
+        ;;
     fedora)
         if ((CONTAINER==0)); then
             # All SELinux distros need this for systemd-in-a-container