diff --git a/Dockerfile b/Dockerfile
index 099bb58..85dfa45 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,6 @@
-FROM ghcr.io/linuxserver/baseimage-selkies:debianbookworm
+# syntax=docker/dockerfile:1
+
+FROM ghcr.io/linuxserver/baseimage-selkies:debiantrixie
 
 # set version label
 ARG BUILD_DATE
diff --git a/Dockerfile.aarch64 b/Dockerfile.aarch64
index a325b58..fbe8cb9 100644
--- a/Dockerfile.aarch64
+++ b/Dockerfile.aarch64
@@ -1,4 +1,6 @@
-FROM ghcr.io/linuxserver/baseimage-selkies:arm64v8-debianbookworm
+# syntax=docker/dockerfile:1
+
+FROM ghcr.io/linuxserver/baseimage-selkies:arm64v8-debiantrixie
 
 # set version label
 ARG BUILD_DATE
diff --git a/README.md b/README.md
index 1cdd0b8..f46afac 100644
--- a/README.md
+++ b/README.md
@@ -229,8 +229,6 @@ services:
   chromium:
     image: lscr.io/linuxserver/chromium:latest
     container_name: chromium
-    security_opt:
-      - seccomp:unconfined #optional
     environment:
       - PUID=1000
       - PGID=1000
@@ -250,7 +248,6 @@ services:
 ```bash
 docker run -d \
   --name=chromium \
-  --security-opt seccomp=unconfined `#optional` \
   -e PUID=1000 \
   -e PGID=1000 \
   -e TZ=Etc/UTC \
@@ -277,7 +274,6 @@ Containers are configured using parameters passed at runtime (such as those abov
 | `-e CHROME_CLI=https://www.linuxserver.io/` | Specify one or multiple Chromium CLI flags, this string will be passed to the application in full. |
 | `-v /config` | Users home directory in the container, stores local files and settings |
 | `--shm-size=` | This is needed for any modern website to function like youtube. |
-| `--security-opt seccomp=unconfined` | For Docker Engine only, many modern gui apps need this to function on older hosts as syscalls are unknown to Docker. Chromium runs in no-sandbox test mode without it. |
 
 ## Environment variables from files (Docker secrets)
 
@@ -441,6 +437,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **22.09.25:** - Rebase to Debian Trixie.
 * **01.07.25:** - Add Kasm branch.
 * **24.06.25:** - Rebase to Selkies.
 * **03.04.25:** - Update chromium launch options to improve performance.
diff --git a/readme-vars.yml b/readme-vars.yml
index e922b10..05a0d67 100644
--- a/readme-vars.yml
+++ b/readme-vars.yml
@@ -33,9 +33,6 @@ custom_params:
 opt_param_usage_include_env: true
 opt_param_env_vars:
   - {env_var: "CHROME_CLI", env_value: "https://www.linuxserver.io/", desc: "Specify one or multiple Chromium CLI flags, this string will be passed to the application in full."}
-opt_security_opt_param: true
-opt_security_opt_param_vars:
-  - {run_var: "seccomp=unconfined", compose_var: "seccomp:unconfined", desc: "For Docker Engine only, many modern gui apps need this to function on older hosts as syscalls are unknown to Docker. Chromium runs in no-sandbox test mode without it."}
 # Selkies blurb settings
 selkies_blurb: true
 show_nvidia: true
@@ -115,6 +112,7 @@ init_diagram: |
   "chromium:latest" <- Base Images
 # changelog
 changelogs:
+  - {date: "22.09.25:", desc: "Rebase to Debian Trixie."}
   - {date: "01.07.25:", desc: "Add Kasm branch."}
   - {date: "24.06.25:", desc: "Rebase to Selkies."}
   - {date: "03.04.25:", desc: "Update chromium launch options to improve performance."}