diff --git a/resourcemanager/Dockerfile b/resourcemanager/Dockerfile
index 24a46f3..6b9cfe3 100644
--- a/resourcemanager/Dockerfile
+++ b/resourcemanager/Dockerfile
@@ -2,9 +2,11 @@ FROM cc/base:1.0
 
 HEALTHCHECK CMD curl -f http://localhost:8088/ || exit 1
 
-ADD run.sh /run.sh
+COPY --chown=hdoop:hdoop run.sh /run.sh
 RUN chmod a+x /run.sh
 
 EXPOSE 8088
 
+USER hdoop
+
 CMD ["/run.sh"]