diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 7bd4a72c94d63bcc82e1239e1bb46ed358da4d6f..ef2e5ccc9379572ee66346e8d73c34e08c54ab86 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,4 +1,4 @@
-image: $CI_REGISTRY/knot/knot-resolver/ci/debian-stable:knot-2.6
+image: $CI_REGISTRY/knot/knot-resolver/ci/debian-stable:knot-2.7
 
 variables:
   DEBIAN_FRONTEND: noninteractive
@@ -36,7 +36,7 @@ build:clang:linux:amd64:
   stage: build
   except:
     - master@knot/knot-resolver
-  image: $CI_REGISTRY/knot/knot-resolver/ci/debian-unstable:knot-2.6  # newer Debian for newer Clang
+  image: $CI_REGISTRY/knot/knot-resolver/ci/debian-unstable:knot-2.7  # newer Debian for newer Clang
   script:
     - rm daemon/lua/kres-gen.lua
     - CXX=clang++-5.0 CC=clang-5.0 make -k all "CFLAGS=-Werror -Wno-error=unused-command-line-argument -ggdb"
@@ -80,7 +80,7 @@ lint:c:
   stage: test
   except:
     - master@knot/knot-resolver
-  image: $CI_REGISTRY/knot/knot-resolver/ci/debian-unstable:knot-2.6  # newer Debian for newer Clang
+  image: $CI_REGISTRY/knot/knot-resolver/ci/debian-unstable:knot-2.7  # newer Debian for newer Clang
   dependencies: []  # do not download build artifacts
   script:
     - make lint-c CLANG_TIDY="clang-tidy-5.0 -quiet"
@@ -92,7 +92,7 @@ lint:clang-scan-build:
   stage: test
   except:
     - master@knot/knot-resolver
-  image: $CI_REGISTRY/knot/knot-resolver/ci/debian-unstable:knot-2.6  # newer Debian for newer Clang
+  image: $CI_REGISTRY/knot/knot-resolver/ci/debian-unstable:knot-2.7  # newer Debian for newer Clang
   dependencies: []  # do not download build artifacts
   script:
     - MAKEFLAGS="-k -j$(nproc)" SCAN_BUILD="/usr/lib/llvm-5.0/bin/scan-build -o scan-results --status-bugs -no-failure-reports" ./tests/clang_scan_build.sh make