diff --git a/python/3.8/jammy/Containerfile b/python/3.8/jammy/Containerfile
index 5933d87..d9c14e4 100644
--- a/python/3.8/jammy/Containerfile
+++ b/python/3.8/jammy/Containerfile
@@ -1,5 +1,6 @@
 # syntax=docker/dockerfile:1
 ARG BASE_IMAGE=docker.io/boxcutter/buildpack-deps:jammy
+# hadolint ignore=DL3006
 FROM $BASE_IMAGE
 
 # ensure local python is preferred over distribution python
@@ -23,7 +24,7 @@ RUN set -eux; \
 ENV GPG_KEY E3FF2839C048B25C084DEBE9B26995E310250568
 ENV PYTHON_VERSION 3.8.20
 
-# hadolint ignore=DL3003,DL3047
+# hadolint ignore=DL3003,DL3047,DL3013
 RUN set -eux; \
 	\
 	wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; \
@@ -46,7 +47,7 @@ RUN set -eux; \
 		--enable-option-checking=fatal \
 		--enable-shared \
 		--with-system-expat \
-		--without-ensurepip \
+		--with-ensurepip \
 	; \
 	nproc="$(nproc)"; \
 	EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; \
@@ -101,7 +102,7 @@ RUN set -eux; \
 # make some useful symlinks that are expected to exist ("/usr/local/bin/python" and friends)
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 RUN set -eux; \
-	for src in idle3 pydoc3 python3 python3-config; do \
+	for src in idle3 pip3 pydoc3 python3 python3-config; do \
 		dst="$(echo "$src" | tr -d 3)"; \
 		[ -s "/usr/local/bin/$src" ]; \
 		[ ! -e "/usr/local/bin/$dst" ]; \