diff --git a/.github/workflows/checkdocs.yml b/.github/workflows/checkdocs.yml
index e249ac62de..c89775f69e 100644
--- a/.github/workflows/checkdocs.yml
+++ b/.github/workflows/checkdocs.yml
@@ -42,7 +42,8 @@ jobs:
   #      - name: install prereqs
   #        run: |
   #          sudo rm -f /etc/apt/sources.list.d/microsoft-prod.list
-  #          sudo apt-get install python3-proselint
+  #          sudo apt-get install -y --no-install-suggests --no-install-recommends \
+  #            python3-proselint
   #
   #      # config file help: https://github.com/amperser/proselint/
   #      - name: create proselint config
diff --git a/.github/workflows/http3-linux.yml b/.github/workflows/http3-linux.yml
index 00aab2ecde..074d1ef622 100644
--- a/.github/workflows/http3-linux.yml
+++ b/.github/workflows/http3-linux.yml
@@ -160,7 +160,8 @@ jobs:
         run: |
           sudo rm -f /etc/apt/sources.list.d/microsoft-prod.list
           sudo apt-get update -y
-          sudo apt-get install libtool autoconf automake pkgconf stunnel4 \
+          sudo apt-get install -y --no-install-suggests --no-install-recommends \
+            libtool autoconf automake pkgconf stunnel4 \
             libpsl-dev libbrotli-dev libzstd-dev zlib1g-dev libev-dev libc-ares-dev \
             nettle-dev libp11-kit-dev libtspi-dev libunistring-dev guile-2.2-dev libtasn1-bin \
             libtasn1-6-dev libidn2-0-dev gawk gperf libtss2-dev dns-root-data bison gtk-doc-tools \
@@ -320,7 +321,8 @@ jobs:
       - run: |
           sudo rm -f /etc/apt/sources.list.d/microsoft-prod.list
           sudo apt-get update -y
-          sudo apt-get install libtool autoconf automake ninja-build pkgconf stunnel4 \
+          sudo apt-get install -y --no-install-suggests --no-install-recommends \
+            libtool autoconf automake ninja-build pkgconf stunnel4 \
             libpsl-dev libbrotli-dev libzstd-dev zlib1g-dev libev-dev libc-ares-dev \
             nettle-dev libp11-kit-dev libtspi-dev libunistring-dev guile-2.2-dev libtasn1-bin \
             libtasn1-6-dev libidn2-0-dev gawk gperf libtss2-dev dns-root-data bison gtk-doc-tools \
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 72ef3de6c0..4ea0f92332 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -281,7 +281,7 @@ jobs:
         run: |
           sudo rm -f /etc/apt/sources.list.d/microsoft-prod.list
           sudo apt-get update -y
-          sudo apt-get install -y \
+          sudo apt-get install -y --no-install-suggests --no-install-recommends \
             libtool autoconf automake pkgconf ninja-build stunnel4 \
             libpsl-dev libbrotli-dev libzstd-dev \
             ${{ matrix.build.install_packages }}
@@ -300,7 +300,8 @@ jobs:
 
       - if: contains(matrix.build.install_steps, 'pytest')
         run: |
-          sudo apt-get install apache2 apache2-dev libnghttp2-dev vsftpd
+          sudo apt-get install -y --no-install-suggests --no-install-recommends \
+            apache2 apache2-dev libnghttp2-dev vsftpd
         name: 'install prereqs for pytest'
 
       - if: startsWith(matrix.build.container, 'alpine')