diff --git a/scripts/admit b/scripts/admit
index d8f45ef..39d943f 100755
--- a/scripts/admit
+++ b/scripts/admit
@@ -170,7 +170,9 @@ build_image() {
     # A long compile can drop its own output stream even with keepalives. That
     # says nothing about whether the build finished, so ask the remote daemon
     # instead of trusting the exit status of a broken pipe.
-    ssh "${ssh_opts[@]}" "$host" "cd /opt/streambuild && docker build --platform linux/amd64 -t '$tag' ." >&2 || true
+    # --network=host: the box's buildkit build network cannot resolve DNS
+    # (NameServerFailure on every dependency fetch); the host stack can.
+    ssh "${ssh_opts[@]}" "$host" "cd /opt/streambuild && docker build --network=host --platform linux/amd64 -t '$tag' ." >&2 || true
     ssh "${ssh_opts[@]}" "$host" "docker image inspect '$tag' >/dev/null" ||
       die "remote build did not produce $tag"
     note "transferring image to the local daemon"