diff --git a/master-protected-branches/master.cfg b/master-protected-branches/master.cfg
index c4fa8c5a..91b7aa5b 100644
--- a/master-protected-branches/master.cfg
+++ b/master-protected-branches/master.cfg
@@ -112,10 +112,10 @@ MASTER_PACKAGES = os.getenv(
 ## hz-bbw2-docker
 c["workers"].append(
     worker.DockerLatentWorker(
-        "hz-bbw1-docker-tarball-debian-10",
+        "hz-bbw1-docker-tarball-debian-12",
         None,
         docker_host=config["private"]["docker_workers"]["hz-bbw1-docker"],
-        image=os.getenv("CONTAINER_REGISTRY_URL", default="quay.io/mariadb-foundation/bb-worker:") + "debian10",
+        image=os.getenv("CONTAINER_REGISTRY_URL", default="quay.io/mariadb-foundation/bb-worker:") + "debian12",
         followStartupLogs=False,
         autopull=True,
         alwaysPull=True,
@@ -130,10 +130,10 @@ c["workers"].append(
 
 c["workers"].append(
     worker.DockerLatentWorker(
-        "hz-bbw4-docker-tarball-debian-10",
+        "hz-bbw4-docker-tarball-debian-12",
         None,
         docker_host=config["private"]["docker_workers"]["hz-bbw4-docker"],
-        image=os.getenv("CONTAINER_REGISTRY_URL", default="quay.io/mariadb-foundation/bb-worker:") + "debian10",
+        image=os.getenv("CONTAINER_REGISTRY_URL", default="quay.io/mariadb-foundation/bb-worker:") + "debian12",
         followStartupLogs=False,
         autopull=True,
         alwaysPull=True,
@@ -440,8 +440,8 @@ c["builders"].append(
     util.BuilderConfig(
         name="tarball-docker",
         workernames=[
-            "hz-bbw1-docker-tarball-debian-10",
-            "hz-bbw4-docker-tarball-debian-10",
+            "hz-bbw1-docker-tarball-debian-12",
+            "hz-bbw4-docker-tarball-debian-12",
         ],
         tags=["tar", "bake"],
         collapseRequests=True,