almalinux:10 is compiled for x86-64-v3, so every RUN in the build-deps image dies on the older amd64 builders before dnf even starts. Give getLabel the per-OS override it already takes the OS argument for, and point el10/amd64 at linux-amd64-v3. Both the image build and the rpm build go through getLabel, so both move.