diff --git a/docker/base/apt_preferences.debian b/docker/base/apt_preferences.debian
index 9c4af3561d..687736c764 100644
--- a/docker/base/apt_preferences.debian
+++ b/docker/base/apt_preferences.debian
@@ -17,3 +17,13 @@ Pin-Priority: 1000
 Package: logstash-oss
 Pin: version 7.9.*
 Pin-Priority: 1000
+
+# NOTE(hrw): we do not want backports unless requested
+Package: *
+Pin: release n=bullseye-backports
+Pin-Priority: -1000
+
+# NOTE(hrw): let us list some backports
+Package: openvswitch* python3-openvswitch ovn-*
+Pin: release n=bullseye-backports
+Pin-Priority: 1024