diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 29a4734..4b3d889 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,10 +30,19 @@ jobs:
           # Get Ubuntu codename dynamically (jammy, noble, etc.)
           CODENAME=$(lsb_release -cs)
 
-          # Configure apt sources for ARM64 from ports.ubuntu.com
+          # Restrict ALL existing apt sources to amd64 only
+          # This includes sources.list and all files in sources.list.d
           sudo sed -i 's/^deb /deb [arch=amd64] /' /etc/apt/sources.list
-          echo "deb [arch=arm64] http://ports.ubuntu.com/ $CODENAME main universe" | sudo tee -a /etc/apt/sources.list
-          echo "deb [arch=arm64] http://ports.ubuntu.com/ $CODENAME-updates main universe" | sudo tee -a /etc/apt/sources.list
+          for f in /etc/apt/sources.list.d/*.list; do
+            if [ -f "$f" ]; then
+              sudo sed -i 's/^deb /deb [arch=amd64] /' "$f"
+            fi
+          done
+
+          # Add ARM64 sources from ports.ubuntu.com (the only mirror with ARM64 packages)
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ $CODENAME main universe" | sudo tee /etc/apt/sources.list.d/arm64.list
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ $CODENAME-updates main universe" | sudo tee -a /etc/apt/sources.list.d/arm64.list
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ $CODENAME-security main universe" | sudo tee -a /etc/apt/sources.list.d/arm64.list
 
           sudo apt-get update
           sudo apt-get install -y gcc-aarch64-linux-gnu libasound2-dev libasound2-dev:arm64