diff --git a/ci/release/build.sh b/ci/release/build.sh
index b716a91a0..9a5e6219d 100755
--- a/ci/release/build.sh
+++ b/ci/release/build.sh
@@ -161,6 +161,8 @@ build_local() {
 }
 
 build_rhost_macos() {
+  sh_c lockfile_ssh "$RHOST" .d2-build-lock
+  trap unlockfile_ssh EXIT
   sh_c ssh "$RHOST" mkdir -p src
   sh_c rsync --archive --human-readable --delete ./ "$RHOST:src/d2/"
   sh_c ssh -tttt "$RHOST" "DRY_RUN=${DRY_RUN-} \
@@ -177,6 +179,8 @@ PATH=\\\"/usr/local/bin:/usr/local/sbin:/opt/homebrew/bin:/opt/homebrew/sbin\\\$
 }
 
 build_rhost_linux() {
+  sh_c lockfile_ssh "$RHOST" .d2-build-lock
+  trap unlockfile_ssh EXIT
   sh_c ssh "$RHOST" mkdir -p src
   sh_c rsync --archive --human-readable --delete ./ "$RHOST:src/d2/"
   sh_c ssh -tttt "$RHOST" "DRY_RUN=${DRY_RUN-} \
diff --git a/ci/sub b/ci/sub
index 75d882344..9bc384b72 160000
--- a/ci/sub
+++ b/ci/sub
@@ -1 +1 @@
-Subproject commit 75d882344578aa409a8f81c8f1ee931e0f0297d0
+Subproject commit 9bc384b724ff8b9007da5ecec809d70f9959a018