diff --git a/.gitea/scripts/install-linux-build-dependencies.sh b/.gitea/scripts/install-linux-build-dependencies.sh
index 8768797..6b1f77c 100644
--- a/.gitea/scripts/install-linux-build-dependencies.sh
+++ b/.gitea/scripts/install-linux-build-dependencies.sh
@@ -46,6 +46,7 @@ case "$target" in
         # They are unrelated to the build, but make apt replace native Python
         # while resolving foreign-architecture development packages.
         sudo env DEBIAN_FRONTEND=noninteractive apt-get remove -y mercurial python3-importlib-metadata python3-jwt
+        install_packages python3 python3-typing-extensions
 
         sudo dpkg --add-architecture amd64
         {
diff --git a/crates/bds-ui/tests/packaging_assets.rs b/crates/bds-ui/tests/packaging_assets.rs
index 2947336..ac2b798 100644
--- a/crates/bds-ui/tests/packaging_assets.rs
+++ b/crates/bds-ui/tests/packaging_assets.rs
@@ -178,6 +178,7 @@ fn tagged_releases_are_built_and_packaged_with_rust_tools() {
         "gcc-x86-64-linux-gnu",
         "Architectures: arm64",
         "remove -y mercurial python3-importlib-metadata python3-jwt",
+        "install_packages python3 python3-typing-extensions",
     ] {
         assert!(
             linux_dependencies.contains(required),
@@ -194,6 +195,13 @@ fn tagged_releases_are_built_and_packaged_with_rust_tools() {
         cleanup < multiarch,
         "runner-only Python packages must be removed before enabling multiarch"
     );
+    let native_python = linux_dependencies
+        .find("install_packages python3 python3-typing-extensions")
+        .expect("native Python dependency setup");
+    assert!(
+        native_python < multiarch,
+        "native Python dependencies must be fixed before enabling multiarch"
+    );
 
     let workspace_manifest = fs::read_to_string(workspace.join("Cargo.toml")).unwrap();
     let core_manifest = fs::read_to_string(workspace.join("crates/bds-core/Cargo.toml")).unwrap();