diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0f489aaef..f3ded4504 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -279,7 +279,7 @@ jobs:
     - name: Build Borg fat binaries (${{ matrix.binary }})
       if: ${{ matrix.binary && startsWith(github.ref, 'refs/tags/') }}
       run: |
-        pip install 'pyinstaller==6.14.2'
+        pip install -r requirements.d/pyinstaller.txt
         mkdir -p dist/binary
         # Ensure locally built binaries in ./dist/binary are found during tox tests
         echo "$GITHUB_WORKSPACE/dist/binary" >> "$GITHUB_PATH"
@@ -429,7 +429,7 @@ jobs:
                 tox -e py311-mfusepy
 
                 if [[ "${{ matrix.do_binaries }}" == "true" && "${{ startsWith(github.ref, 'refs/tags/') }}" == "true" ]]; then
-                  python -m pip install 'pyinstaller==6.14.2'
+                  python -m pip install -r requirements.d/pyinstaller.txt
                   mkdir -p dist/binary
                   pyinstaller --clean --distpath=dist/binary scripts/borg.exe.spec
                   pushd dist/binary
@@ -576,7 +576,7 @@ jobs:
           . env/bin/activate
           # python -m pip install --upgrade pip
           # pip install --upgrade setuptools build wheel
-          pip install pyinstaller==6.14.2
+          pip install -r requirements.d/pyinstaller.txt
 
       - name: Build
         run: |
diff --git a/Vagrantfile b/Vagrantfile
index 2bec9f519..e1904c7ae 100644
--- a/Vagrantfile
+++ b/Vagrantfile
@@ -206,7 +206,7 @@ def install_pyinstaller()
     . ~/.bash_profile
     cd /vagrant/borg
     . borg-env/bin/activate
-    pip install 'pyinstaller==6.14.2'
+    pip install -r requirements.d/pyinstaller.txt
   EOF
 end
 
diff --git a/requirements.d/pyinstaller.txt b/requirements.d/pyinstaller.txt
new file mode 100644
index 000000000..132be3872
--- /dev/null
+++ b/requirements.d/pyinstaller.txt
@@ -0,0 +1 @@
+pyinstaller==6.14.2