diff --git a/Dockerfile b/Dockerfile
index cb6d478..d8135ca 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,8 +2,19 @@
 
 FROM focs.ji.sjtu.edu.cn:5000/gitea/runner-images:ubuntu-latest
 
+RUN apt-get update && \
+    apt-get install -y sudo && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* && \
+    useradd -u 1000 -ms /bin/bash tt && \
+    useradd -u 1001 -ms /bin/bash student && \
+    echo "student ALL=(tt) /usr/local/bin/joj3" > /etc/sudoers.d/joj
+
 # install joint-teapot
 RUN pip install --no-cache-dir git+https://mirror.ghproxy.com/https://github.com/BoYanZh/Joint-Teapot
 
 # install joj3 binary
 COPY bin/joj3 /usr/local/bin/
+
+USER student
+WORKDIR /home/student