diff --git a/.cirrus.yml b/.cirrus.yml
index eefed89ac4..6570947dfb 100644
--- a/.cirrus.yml
+++ b/.cirrus.yml
@@ -31,7 +31,7 @@ env:
     DEBIAN_NAME: "debian-13"
 
     # Image identifiers
-    IMAGE_SUFFIX: "c20250324t111922z-f41f40d13"
+    IMAGE_SUFFIX: "c20250401t092024z-f41f40d13"
 
     # EC2 images
     FEDORA_AMI: "fedora-aws-${IMAGE_SUFFIX}"
diff --git a/Makefile b/Makefile
index d431bf7adf..968bdc263f 100644
--- a/Makefile
+++ b/Makefile
@@ -55,6 +55,7 @@ BUILDTAGS ?= \
 	$(shell hack/btrfs_tag.sh) \
 	$(shell hack/systemd_tag.sh) \
 	$(shell hack/libsubid_tag.sh) \
+	$(shell hack/libsqlite3_tag.sh) \
 	seccomp
 # allow downstreams to easily add build tags while keeping our defaults
 BUILDTAGS += ${EXTRA_BUILDTAGS}
diff --git a/hack/libsqlite3_tag.sh b/hack/libsqlite3_tag.sh
new file mode 100755
index 0000000000..b4a6e73c82
--- /dev/null
+++ b/hack/libsqlite3_tag.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+${CPP:-${CC:-cc} -E} ${CPPFLAGS} - > /dev/null 2> /dev/null << EOF
+#include <sqlite3.h>
+EOF
+if test $? -eq 0 ; then
+	echo libsqlite3
+fi