diff --git a/init_node b/init_node
index 1a9d95324e6976360272c68e7fa9865087f095b8..98ab96d24a4e3d9f3f1f4bf25916979d11441216 100755
--- a/init_node
+++ b/init_node
@@ -33,7 +33,8 @@ echo '%jenkins-adm ALL= NOPASSWD: ALL' > /etc/sudoers.d/jenkins-adm # will be ov
 grep -q bullseye-backports /etc/apt/sources.list || echo "deb http://deb.debian.org/debian/ bullseye-backports main contrib non-free" >> /etc/apt/sources.list
 chown jenkins-adm.jenkins-adm /home/jenkins-adm
 cd ~jenkins-adm
-[ -x /usr/bin/git ] || apt-get install -y git
+# the keyring is needed as otherwise update_jdn will fail later
+[ -x /usr/bin/git ] || apt-get install -y git fasttrack-archive-keyring
 su jenkins-adm -l -c "git clone $GIT_REPO"
 cd jenkins.debian.net
 su jenkins-adm -l -c "git -C ~jenkins-adm/jenkins.debian.net config pull.ff only"
diff --git a/update_jdn.sh b/update_jdn.sh
index c1f1a5754a21d1786375aa64f66bc54115fd40e7..df743a71a57beb3f377d0d58f1a6a65a6e213201 100755
--- a/update_jdn.sh
+++ b/update_jdn.sh
@@ -311,6 +311,7 @@ if [ -f /etc/debian_version ] ; then
 			devscripts
 			eatmydata
 			etckeeper
+			fasttrack-archive-keyring
 			figlet
 			git
 			gnupg