diff --git a/ci_build_images/rhel7.Dockerfile b/ci_build_images/rhel7.Dockerfile
index f296947a..77e2b25a 100644
--- a/ci_build_images/rhel7.Dockerfile
+++ b/ci_build_images/rhel7.Dockerfile
@@ -14,7 +14,6 @@ RUN --mount=type=secret,id=rhel_orgid,target=/run/secrets/rhel_orgid \
     && subscription-manager register \
          --org="$(cat /run/secrets/rhel_orgid)" \
          --activationkey="$(cat /run/secrets/rhel_keyname)" \
-    && subscription-manager repos --enable=rhel-7-server-optional-rpms \
     && rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm \
     && yum -y upgrade \
     # the following is needed in case the subscription-manager was upgraded by the previous step \
@@ -24,6 +23,7 @@ RUN --mount=type=secret,id=rhel_orgid,target=/run/secrets/rhel_orgid \
     && subscription-manager register \
          --org="$(cat /run/secrets/rhel_orgid)" \
          --activationkey="$(cat /run/secrets/rhel_keyname)" \
+    && subscription-manager repos --enable=rhel-7-server-optional-rpms \
     && yum-builddep -y mariadb-server \
     && yum -y install \
     @development \