diff --git a/Dockerfile.template b/Dockerfile.template
index ab0f23e..b9c722d 100644
--- a/Dockerfile.template
+++ b/Dockerfile.template
@@ -4,14 +4,12 @@ SHELL ["/bin/bash", "-c"]
 RUN ROOTFS="$(curl --continue-at - --remote-name --write-out "%{filename_effective}" TEMPLATE_ROOTFS_URL)" && \
     sha256sum -c <<< "TEMPLATE_ROOTFS_HASH" && \
     mkdir /rootfs && \
-    tar -C /rootfs --extract --auto-compress --file "${ROOTFS}"
+    # Fix kaniko DNS problems as kaniko uses the current layer's resolv.conf. \
+    tar -C /rootfs --extract --auto-compress --exclude=./etc/resolv.conf --file "${ROOTFS}"
 
 FROM scratch AS base
 COPY --from=verify /rootfs/ /
 
-# Fix kaniko DNS problems as kaniko uses the current layer's resolv.conf.
-COPY --from=verify /etc/resolv.conf /etc/resolv.conf
-
 # manually run all alpm hooks that can't be run inside the fakechroot
 RUN ldconfig && update-ca-trust && locale-gen
 RUN sh -c 'ls usr/lib/sysusers.d/*.conf | /usr/share/libalpm/scripts/systemd-hook sysusers '