diff --git a/Containerfile b/Containerfile
index f512548..cf75a3c 100644
--- a/Containerfile
+++ b/Containerfile
@@ -23,7 +23,7 @@
 # Because it's generating a base image and uses containerization features itself.
 # In the future some of this can be lifted.
 
-FROM quay.io/fedora/fedora:rawhide as repos
+FROM quay.io/fedora/fedora:42 as repos
 
 # BOOTSTRAPPING: This can be any image that has rpm-ostree and selinux-policy-targeted.
 FROM quay.io/fedora/fedora:rawhide as builder
diff --git a/tier-1/manifest.yaml b/tier-1/manifest.yaml
index c84117b..474843e 100644
--- a/tier-1/manifest.yaml
+++ b/tier-1/manifest.yaml
@@ -36,6 +36,8 @@ packages:
   - zram-generator
   # This one is in Python so isn't in FCOS, but we can safely add it here.
   - sos
+  # in c9s authselect is not pulled by pam, this makes sure we have parity.
+  - authselect
 
 # These are random architecture-specific packages
 packages-x86_64: