diff --git a/scripts/install.sh b/scripts/install.sh
index 30539cc..0924e86 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -125,7 +125,7 @@ sudo systemctl enable ssh
 sudo systemctl restart ssh
 
 # Additional tools fail2ban
-sudo -E apt-get install -y dnsutils fail2ban netcat
+sudo -E apt-get install -y dnsutils fail2ban
 
 # Install kernel headers
 if [ "$DISTRO" == "ubuntu" ] || [ "$DISTRO" == "debian" ]; then
diff --git a/scripts/wrappers/mistborn_docker.sh b/scripts/wrappers/mistborn_docker.sh
index a5fa403..fa918e9 100755
--- a/scripts/wrappers/mistborn_docker.sh
+++ b/scripts/wrappers/mistborn_docker.sh
@@ -37,6 +37,12 @@ for SERVICE in "${SERVICES_ARRAY[@]}"; do
     fi
 done
 
+# check that netcat exists
+if ! [ -x "$(command -v nc)" ]; then
+    echo "Installing netcat"
+    sudo apt-get install -y netcat
+fi
+
 # ensure base is up and listening
 echo "Checking that Mistborn-base has finished starting up..."