diff --git a/debian/patches/0300-relax-rbnacl.patch b/debian/patches/0300-relax-rbnacl.patch
new file mode 100644
index 0000000000..49e93c5c01
--- /dev/null
+++ b/debian/patches/0300-relax-rbnacl.patch
@@ -0,0 +1,11 @@
+--- a/Gemfile
++++ b/Gemfile
+@@ -377,7 +377,7 @@
+ # Required for ED25519 SSH host key support
+ group :ed25519 do
+   gem 'rbnacl-libsodium'
+-  gem 'rbnacl', '~> 3.2'
++  gem 'rbnacl', '>= 3.2'
+   gem 'bcrypt_pbkdf', '~> 1.0'
+ end
+ 
diff --git a/debian/patches/series b/debian/patches/series
index dad4783ed4..1d1e0d288c 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -11,6 +11,7 @@ pid-log-paths.patch
 0270-relax-toml-rb.patch
 0280-relax-pg.patch
 0290-skip-peek-mysql2.patch
+0300-relax-rbnacl.patch
 0410-set-webpack-root.patch
 0420-use-system-libs.patch
 add-system-lib-path-for-webpack.patch