diff --git a/molecule/repos_default/molecule.yml b/molecule/repos_default/molecule.yml
index 40bc769..924d7b8 100644
--- a/molecule/repos_default/molecule.yml
+++ b/molecule/repos_default/molecule.yml
@@ -9,7 +9,10 @@ driver:
 platforms:
   - name: "repos-def-${MOLECULE_DISTRO:-debian12}-r${ELASTIC_RELEASE:-9}${MOLECULE_RUN_SUFFIX}"
     distro: "${MOLECULE_DISTRO:-debian12}"
-    memory_mb: 512
+    # 1024 MiB so dnf on rockylinux9 does not get OOM-killed during the
+    # security-packages install in the idempotence run. Every other
+    # scenario uses 2048+, this one was the outlier at 512.
+    memory_mb: 1024
 provisioner:
   name: ansible
   env: