diff --git a/nix/default.nix b/nix/default.nix
index 5b632c9fd..15f076d7c 100644
--- a/nix/default.nix
+++ b/nix/default.nix
@@ -479,10 +479,14 @@ in rec {
 
     # Ensure the home directory is r/w for any uid
     rwHome = "mkdir -p -m 1777 ${home}";
+
+    # Ensure /bin/sh (docker healthcheck assumes /bin/sh)
+    binSh = "ln -s usr/bin/sh bin/sh";
+
   in pkgs.dockerTools.buildLayeredImage {
     name = "quay.io/change-metrics/monocle-exe";
     contents = [ monocle-wrapper ];
-    extraCommands = "${createPasswd} && ${rwHome}";
+    extraCommands = "${createPasswd} && ${rwHome} && ${binSh}";
     tag = "latest";
     created = "now";
     config = {