diff --git a/Dockerfile b/Dockerfile
index 9cd07ad2..ab6303a2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,6 +5,10 @@ COPY amtool                       /bin/amtool
 COPY alertmanager                 /bin/alertmanager
 COPY examples/ha/alertmanager.yml /etc/alertmanager/alertmanager.yml
 
+RUN mkdir -p /alertmanager && \
+    chown -R nobody:nogroup etc/alertmanager /alertmanager
+
+USER       nobody
 EXPOSE     9093
 VOLUME     [ "/alertmanager" ]
 WORKDIR    /alertmanager