diff --git a/Dockerfile b/Dockerfile
index 1e8df42..5239da5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -40,6 +40,12 @@ RUN sed -i 's/deb.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list.d/debi
 ENV OJ_ENV production
 WORKDIR /app
 
+# 创建必要的用户和组
+RUN groupadd -g 903 spj && \
+    useradd -u 900 -g spj -m -s /bin/bash server && \
+    groupadd -r oj && \
+    useradd -r -g oj -d /app oj
+
 RUN --mount=type=cache,target=/var/cache/apt,id=apt-cache-$TARGETARCH$TARGETVARIANT-final \
     <<EOS
 set -ex
@@ -60,9 +66,13 @@ EOS
 
 COPY --from=builder /usr/local/lib/python3.12/site-packages/ /usr/local/lib/python3.12/site-packages/
 COPY ./ /app/
-RUN mkdir -p /app/dist/ && \
-    chmod -R u=rwX,go=rX ./ && \
-    chmod +x ./deploy/entrypoint.sh
+
+# 设置目录权限
+RUN mkdir -p /app/dist/ /data && \
+    chown -R oj:oj /app && \
+    chown -R server:spj /data && \
+    chmod -R u=rwX,go=rX /app && \
+    chmod +x /app/deploy/entrypoint.sh
 
 HEALTHCHECK --interval=5s CMD [ "/usr/local/bin/python3", "/app/deploy/health_check.py" ]
 EXPOSE 8000