diff --git a/build.sh b/build.sh
index 719cf04476f21d2922f3f71a4137d543506deadf..86b51bfc6468eb744fdf6ceea05d8d3eea098138 100755
--- a/build.sh
+++ b/build.sh
@@ -78,11 +78,24 @@ mkdir -p /opt/noblogs/www/wp-content/blogs.dir
 mkdir -p /opt/noblogs/www/wp-content/cache
 mkdir -p /var/lib/php/uploads
 
-# Install wp-cli directly from the net.
+# Install wp-cli directly from the net, along with minimal
+# configuration, passed via a wrapper.
 curl -o /usr/bin/wp-cli.phar https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
+cat > /etc/wp-cli.yml <<EOF
+path: /opt/noblogs/www
+color: false
+user: admin
+disabled_commands:
+  - db drop
+  - plugin install
+EOF
+chmod 0644 /etc/wp-cli.yml
 cat > /usr/bin/wp <<EOF
 #!/bin/sh
-exec /usr/bin/php /usr/bin/wp-cli.phar --path=/opt/noblogs/www "\$@"
+export WP_CLI_CONFIG_PATH=/etc/wp-cli.yml
+export WP_CLI_CUSTOM_SHELL=/bin/sh
+export WP_CLI_DISABLE_AUTO_CHECK_UPDATE=1
+exec /usr/bin/php /usr/bin/wp-cli.phar "\$@"
 EOF
 chmod 0755 /usr/bin/wp /usr/bin/wp-cli.phar