diff --git a/images/installer/Dockerfile.upi.ci b/images/installer/Dockerfile.upi.ci
index 42e7a466e93..a684bfb8831 100644
--- a/images/installer/Dockerfile.upi.ci
+++ b/images/installer/Dockerfile.upi.ci
@@ -53,13 +53,14 @@ ENV ART_DNF_WRAPPER_POLICY=append
 RUN yum update -y && \
     yum install --setopt=tsflags=nodocs -y \      
       gettext \
+      python3.11 \
       google-cloud-cli-563.0.0-1 \
       gzip \
       jq \
       unzip \
       openssh-clients \
       openssl \      
-      python3-pip \
+      python3.11-pip \
       python3-pyyaml \
       util-linux \
       xz \
@@ -73,13 +74,13 @@ COPY --from=yq4 /usr/bin/yq /bin/yq-v4
 
 # Not packaged, but required by gcloud. See https://cloud.google.com/sdk/crypto
 # Pin version because of https://github.com/GoogleCloudPlatform/gsutil/issues/1753
-RUN pip-3 install cryptography pyOpenSSL==23.2.0
+RUN pip3.11 install --no-cache-dir cryptography pyOpenSSL==23.2.0
 
-ENV CLOUDSDK_PYTHON=/usr/bin/python
+ENV CLOUDSDK_PYTHON=/usr/bin/python3.11
 ENV CLOUDSDK_PYTHON_SITEPACKAGES=1
 
 # aicli
-RUN pip-3 install aicli==99.0.202407291433
+RUN pip3.11 install --no-cache-dir aicli==99.0.202407291433
 
 RUN curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" && \
     unzip awscliv2.zip && \