diff --git a/ci/testnet-sanity.sh b/ci/testnet-sanity.sh
index d97075508..40d54375c 100755
--- a/ci/testnet-sanity.sh
+++ b/ci/testnet-sanity.sh
@@ -20,7 +20,10 @@ echo "--- $NET_URL: verify ledger"
 if [[ -z $NO_LEDGER_VERIFY ]]; then
   if [[ -d /var/snap/solana/current/config/ledger ]]; then
     # Note: here we assume this script is actually running on the leader node...
-    sudo solana.ledger-tool --ledger /var/snap/solana/current/config/ledger verify
+    LEDGER=/tmp/ledger-${BUILDKITE_BUILD_ID:-$$}
+    cp -r /var/snap/solana/current/config/ledger "$LEDGER"
+    solana.ledger-tool --ledger "$LEDGER" verify
+    rm -rf "$LEDGER"
   else
     echo "^^^ +++"
     echo "Ledger verify skipped"