diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 3a004d07..b3f4dad5 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -202,9 +202,16 @@ lint_format_safety_bandit_checks:
 
 
 lint_mypy:
-  image: python:3.9-buster
+  image: debian:bullseye
+  <<: *apt-template
   script:
-    - pip install mypy
+    - sed -i '/pyjks/d' setup.py  # TODO get from backports once available
+    # use Debian packages to avoid building C/rust sources
+    - apt-get install
+          mypy
+          python3-cryptography
+          python3-pip
+          python3-wheel
     - pip install -e .[test]
     # exclude vendored file
     - mypy --exclude fdroidserver/apksigcopier.py