diff --git a/scripts/docker/centos7-epel-rpm.Dockerfile b/scripts/docker/centos7-epel-rpm.Dockerfile
index 32ad5360f2..94c258d752 100644
--- a/scripts/docker/centos7-epel-rpm.Dockerfile
+++ b/scripts/docker/centos7-epel-rpm.Dockerfile
@@ -3,6 +3,9 @@ FROM centos:7
 ARG artifact_url=""
 ADD ${artifact_url} /tmp
 ADD node_modules /usr/share/mongodb-crypt-library-version/node_modules
+# centos7 is eol, switch to vault repos
+RUN yum-config-manager --disable base extras updates
+RUN yum-config-manager --enable C7.8.2003-base C7.8.2003-extras C7.8.2003-updates
 RUN yum repolist
 # epel-release so that openssl11 is installable
 RUN yum install -y epel-release
diff --git a/scripts/docker/centos7-rpm.Dockerfile b/scripts/docker/centos7-rpm.Dockerfile
index 97e0a72161..f08ae9ece6 100644
--- a/scripts/docker/centos7-rpm.Dockerfile
+++ b/scripts/docker/centos7-rpm.Dockerfile
@@ -3,6 +3,9 @@ FROM centos:7
 ARG artifact_url=""
 ADD ${artifact_url} /tmp
 ADD node_modules /usr/share/mongodb-crypt-library-version/node_modules
+# centos7 is eol, switch to vault repos
+RUN yum-config-manager --disable base extras updates
+RUN yum-config-manager --enable C7.8.2003-base C7.8.2003-extras C7.8.2003-updates
 RUN yum repolist
 RUN yum install -y /tmp/*mongosh*.rpm
 RUN /usr/bin/mongosh --build-info