diff --git a/Dockerfile b/Dockerfile
index 75785ed..872fb9f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -31,6 +31,7 @@ RUN \
   mkdir /etc/sink
 
 EXPOSE 20169/udp
+USER nobody
 
 CMD [ "/usr/local/bin/sink20169", "-n", "nobody", "-v" ]