diff --git a/manifests/site.pp b/manifests/site.pp
index 72cd70e000..a12c9dd085 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -773,7 +773,10 @@ node /^ze\d+\.open.*\.org$/ {
 
   apt::ppa { 'ppa:projectatomic/ppa': }
   package { 'skopeo':
-    ensure  => present,
+    # Pin skopeo back to 0.1.36-1~dev~ubuntu16.04.2~ppa14 which is before
+    # the code that changed the required capabilities, breaking the use of
+    # skopeo from inside of bubblewrap.
+    ensure  => '0.1.36-1~dev~ubuntu16.04.2~ppa14',
     require => [
       Apt::Ppa['ppa:projectatomic/ppa'],
       Class['apt::update'],