diff --git a/Dockerfile b/Dockerfile
index 862cdc0..7f693a1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,6 +5,13 @@ EXPOSE 8080
 
 FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 
+# 创建与宿主机匹配的 UID/GID
+ARG TARGET_UID=1000
+ARG TARGET_GID=1000
+
+RUN groupadd -g $TARGET_GID appuser && \
+    useradd -u $TARGET_UID -g $TARGET_GID -d /app -s /bin/bash appuser
+
 ARG BUILD_CONFIGURATION=Release
 WORKDIR /src
 COPY ["src/Core/Core.csproj", "src/Core/"]