diff --git a/docker-tests/Dockerfile.innernet b/docker-tests/Dockerfile.innernet
index d216582..7e96cae 100644
--- a/docker-tests/Dockerfile.innernet
+++ b/docker-tests/Dockerfile.innernet
@@ -1,12 +1,14 @@
 ####################################################################################################
 ## WireGuard
 ####################################################################################################
-FROM golang:bookworm as wireguard
+
+# Pin go 1.22 as the latest tag of wireguard-go (0.0.20230223) doesn't build with go 1.23+ due to
+# its outdated x/net dependency. We can use latest go once they release newer version.
+FROM golang:1.22-bookworm as wireguard
 ARG wg_go_tag=0.0.20230223
-ARG wg_tools_tag=v1.0.20210914
 
 RUN mkdir /repo \
-    && curl -L https://github.com/WireGuard/wireguard-go/archive/refs/tags/0.0.20230223.tar.gz \
+    && curl -L https://github.com/WireGuard/wireguard-go/archive/refs/tags/${wg_go_tag}.tar.gz \
     | tar -xzC /repo --strip-components=1 \
     && cd /repo \
     && CGO_ENABLED=0 make