diff --git a/centos-bootc-config.json b/centos-bootc-config.json
index 7d8322c..0537155 100644
--- a/centos-bootc-config.json
+++ b/centos-bootc-config.json
@@ -4,5 +4,6 @@
         "redhat.compose-id": "CentOS-Stream-9-20240304.d.0",
         "redhat.id": "centos",
         "redhat.version-id": "9"
-    }
+    },
+    "StopSignal": "SIGRTMIN+3"
 }
diff --git a/fedora-bootc-config.json b/fedora-bootc-config.json
index 6d6de70..e615713 100644
--- a/fedora-bootc-config.json
+++ b/fedora-bootc-config.json
@@ -4,5 +4,6 @@
         "redhat.compose-id": "Fedora-ELN-20240326.3",
         "redhat.id": "fedora",
         "redhat.version-id": "ELN"
-    }
+    },
+    "StopSignal": "SIGRTMIN+3"
 }
diff --git a/tier-0/manifest.yaml b/tier-0/manifest.yaml
index 9c05130..007f6d7 100644
--- a/tier-0/manifest.yaml
+++ b/tier-0/manifest.yaml
@@ -19,7 +19,7 @@ etc-group-members:
 
 # Default to `bash` in our container, the same as other containers we ship.
 container-cmd:
-  - /usr/bin/bash
+  - /sbin/init
 
 # Note that the default for c9s+ is sqlite; we can't rely on rpm being
 # in the target (it isn't in tier-0!) so turn this to host here.  This