diff --git a/.kitchen.dokken.yml b/.kitchen.dokken.yml
index 26c9d45..5c2dc07 100644
--- a/.kitchen.dokken.yml
+++ b/.kitchen.dokken.yml
@@ -2,7 +2,7 @@
 driver:
   name: dokken
   privileged: true
-  chef_version: current
+  chef_version: '13.6.4' # workaround for chef/chef#6784
   volumes:
     - /sys/fs/cgroup:/sys/fs/cgroup:ro
     - /sys/fs/selinux:/sys/fs/selinux:rw
diff --git a/.kitchen.multi.yml b/.kitchen.multi.yml
index 26ece1e..4f2f899 100644
--- a/.kitchen.multi.yml
+++ b/.kitchen.multi.yml
@@ -13,7 +13,7 @@ provisioner:
   # For example:
   #   always_update_cookbooks: <%= !ENV['CI'] %>
   always_update_cookbooks: true
-  require_chef_omnibus: 13
+  require_chef_omnibus: '13.6.4' # workaround for chef/chef#6784
   # Copy secret to /tmp/kitchen on test VM. Kitchen tries to gather secrets
   # before any recipes had a chance to run -> we cannot use a recipe to put the
   # secrets file in place.
diff --git a/.kitchen.yml b/.kitchen.yml
index 9f1683f..66963c5 100644
--- a/.kitchen.yml
+++ b/.kitchen.yml
@@ -15,7 +15,7 @@ provisioner:
   # For example:
   #   always_update_cookbooks: <%= !ENV['CI'] %>
   always_update_cookbooks: true
-  require_chef_omnibus: 13
+  require_chef_omnibus: '13.6.4' # workaround for chef/chef#6784
   # Copy secret to /tmp/kitchen on test VM. Kitchen tries to gather secrets
   # before any recipes had a chance to run -> we cannot use a recipe to put the
   # secrets file in place.