diff --git a/gitea-runner/Dockerfile b/gitea-runner/Dockerfile
index 90c116b..0089e0f 100644
--- a/gitea-runner/Dockerfile
+++ b/gitea-runner/Dockerfile
@@ -58,6 +58,7 @@ RUN --mount=type=cache,target=/var/cache/pacman pacman -S --noconfirm --needed \
     arm-unknown-linux-musleabi-zlib \
     x86_64-unknown-linux-musl-zlib \
     x86_64-w64-mingw32-zlib \
+    rustup \
     upx
 RUN ln -s /opt/x-tools/aarch64-unknown-linux-musl/bin/aarch64-unknown-linux-musl-gcc /usr/local/bin/aarch64-linux-musl-gcc 
 RUN ln -s /opt/x-tools/x86_64-unknown-linux-musl/bin/x86_64-unknown-linux-musl-gcc /usr/local/bin/x86_64-linux-musl-gcc
@@ -65,6 +66,8 @@ RUN ln -s /opt/x-tools/arm-unknown-linux-musleabihf/bin/arm-unknown-linux-muslea
 RUN ln -s /opt/x-tools/arm-unknown-linux-musleabihf/bin/arm-unknown-linux-musleabi-gcc /usr/local/bin/arm-linux-musleabi-gcc
 RUN ln -s /opt/x-tools/x86_64-w64-mingw32/bin/x86_64-w64-mingw32-gcc /usr/local/bin/x86_64-pc-windows-gnu-gcc
 RUN useradd gitea-runner -u 1000 -s /bin/bash -m -d /var/lib/gitea-runner
+USER gitea-runner
+WORKDIR /var/lib/gitea-runner
 
 FROM alpine:${ALPINE_VERSION} AS pnpm
 RUN --mount=type=cache,target=/var/cache/apk apk update