diff --git a/docker/Dockerfile b/docker/Dockerfile
index 1ef1fbdc..5a01563e 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -17,8 +17,11 @@ RUN ./gradlew --console=verbose --info shadowJar
 
 FROM ${DOCKER_REGISTRY:+$DOCKER_REGISTRY/}zookeeper:3.7.1
 COPY bin /usr/local/bin
-RUN chmod +x /usr/local/bin/*
 COPY --from=0 /zu/build/libs/zu.jar /opt/libs/
 
 RUN apt-get -q update && \
+    chmod +x /usr/local/bin/* && \
+    chown zookeeper:zookeeper /usr/local/bin/* /opt/libs/* && \
     apt-get install -y dnsutils curl procps socat
+
+USER zookeeper
\ No newline at end of file