diff --git a/demo/Dockerfile-canaille b/demo/Dockerfile-canaille
index 5da24756..e098ad3a 100644
--- a/demo/Dockerfile-canaille
+++ b/demo/Dockerfile-canaille
@@ -7,7 +7,16 @@ RUN \
     gcc \
     libsasl2-dev \
     libldap2-dev \
-    libssl-dev
+    libssl-dev \
+    curl
+
+RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
+
+ENV PATH="/root/.cargo/bin:${PATH}"
+
+# Needed until zxcvbn supports Python 3.13
+# https://github.com/fief-dev/zxcvbn-rs-py/issues/2
+ENV PYO3_USE_ABI3_FORWARD_COMPATIBILITY="1"
 
 COPY uv.lock pyproject.toml hatch_build.py LICENSE.rst README.md demo/demoapp.py /opt/canaille/
 COPY canaille /opt/canaille/canaille