diff --git a/Dockerfile b/Dockerfile
index 1749510..f9adc25 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -55,7 +55,8 @@ COPY server/ ./server/
 # 构建应用（在项目根目录，go.work 会自动生效）
 # 使用 -ldflags 减小二进制文件大小，移除调试信息
 WORKDIR /app/server
-RUN go build -ldflags="-w -s" -trimpath -o /out/server ./cmd/server/main.go
+RUN go build -ldflags="-w -s" -trimpath -o /out/server ./cmd/server/main.go && \
+    chmod +x /out/server
 
 # 使用最小化的 alpine 镜像（包含时区支持，应用需要 loc=Local）
 FROM alpine:3.19
@@ -67,9 +68,7 @@ RUN apk add --no-cache ca-certificates tzdata && \
     # 清理缓存
     rm -rf /var/cache/apk/*
 WORKDIR /app
-COPY --from=builder /out/server /app/server
-# 确保二进制文件有执行权限
-RUN chmod +x /app/server
+COPY --from=builder --chown=appuser:appuser /out/server /app/server
 EXPOSE 8077
 USER appuser:appuser
 ENTRYPOINT ["/app/server"]