diff --git a/nodemanager/Dockerfile b/nodemanager/Dockerfile
index 4121aac..d444304 100644
--- a/nodemanager/Dockerfile
+++ b/nodemanager/Dockerfile
@@ -2,9 +2,11 @@ FROM cc/base:1.0
 
 HEALTHCHECK CMD curl -f http://localhost:8042/ || exit 1
 
-ADD run.sh /run.sh
+COPY --chown=hdoop:hdoop run.sh /run.sh
 RUN chmod a+x /run.sh
 
 EXPOSE 8042
 
+USER hdoop
+
 CMD ["/run.sh"]