diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4dea6a4..c2ad20b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -345,13 +345,16 @@ jobs:
           args: --release --out dist
           working-directory: sdk/python
           sccache: 'true'
+          docker-options: >-
+            -e CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_LINKER=cc
+            -e CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_RUSTFLAGS=
           before-script-linux: |
             set -euo pipefail
             PROTOC_VERSION=28.3
             ARCH=$(uname -m)
             case "$ARCH" in
               x86_64) ZIP="protoc-${PROTOC_VERSION}-linux-x86_64.zip" ;;
-              aarch64) ZIP="protoc-${PROTOC_VERSION}-linux-aarch64.zip" ;;
+              aarch64) ZIP="protoc-${PROTOC_VERSION}-linux-aarch_64.zip" ;;
               *) echo "unsupported arch ${ARCH}"; exit 1 ;;
             esac
             if command -v yum >/dev/null 2>&1; then
@@ -362,7 +365,7 @@ jobs:
               apt-get update
               apt-get install -y --no-install-recommends unzip curl
             fi
-            curl -sSL -o "/tmp/${ZIP}" \
+            curl -fsSL -o "/tmp/${ZIP}" \
               "https://github.com/protocolbuffers/protobuf/releases/download/v${PROTOC_VERSION}/${ZIP}"
             unzip -o "/tmp/${ZIP}" -d /usr/local
             rm -f "/tmp/${ZIP}"