diff --git a/Dockerfile b/Dockerfile
index 2b73e43b4..893518b95 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,7 +8,10 @@ COPY console_libraries/                     /usr/share/prometheus/console_librar
 COPY consoles/                              /usr/share/prometheus/consoles/
 
 RUN ln -s /usr/share/prometheus/console_libraries /usr/share/prometheus/consoles/ /etc/prometheus/
+RUN mkdir -p /prometheus && \
+    chown -R nobody:nogroup etc/prometheus /prometheus
 
+USER       nobody
 EXPOSE     9090
 VOLUME     [ "/prometheus" ]
 WORKDIR    /prometheus