diff --git a/pkg/ddevapp/config.go b/pkg/ddevapp/config.go
index a8c843404eb..ae9b9050435 100644
--- a/pkg/ddevapp/config.go
+++ b/pkg/ddevapp/config.go
@@ -936,6 +936,11 @@ func (app *DdevApp) RenderComposeYAML() (string, error) {
 		extraWebContent = extraWebContent + fmt.Sprintf("\nRUN n install %s && ln -sf /usr/local/bin/node /usr/local/bin/nodejs", app.NodeJSVersion)
 	}
 
+	// Some installed packages can change the permissions of /run/php
+	// First seen in Debian 12 Bookworm
+	// See https://github.com/ddev/ddev/issues/5898
+	extraWebContent = extraWebContent + "\nRUN chmod 777 /run/php"
+
 	// Add supervisord config for WebExtraDaemons
 	var supervisorGroup []string
 	for _, appStart := range app.WebExtraDaemons {
diff --git a/pkg/ddevapp/config_test.go b/pkg/ddevapp/config_test.go
index e3834974736..04255c5865a 100644
--- a/pkg/ddevapp/config_test.go
+++ b/pkg/ddevapp/config_test.go
@@ -984,7 +984,9 @@ func TestExtraPackages(t *testing.T) {
 	require.NoError(t, err)
 
 	addedDBPackage := "sudo"
-	addedWebPackage := "tmux"
+	// php-gmp is flaky on Debian 12 Bookworm,
+	// we can test it https://github.com/ddev/ddev/issues/5898
+	addedWebPackage := "php" + app.PHPVersion + "-" + "gmp"
 
 	// Test db container to make sure no sudo in there at beginning
 	_, _, err = app.Exec(&ddevapp.ExecOpts{