diff --git a/internal/runtime/docker.go b/internal/runtime/docker.go index 172b9f0..e953cc8 100644 --- a/internal/runtime/docker.go +++ b/internal/runtime/docker.go @@ -562,7 +562,7 @@ func (d *DockerRuntime) DeployAgent(ctx context.Context, config AgentConfig) (*A resp, err := d.client.ContainerCreate(ctx, &container.Config{ Image: img, - User: "0:0", // Start as root so entrypoint.sh can fix workspace permissions and drop privileges via gosu. + Env: env, Labels: map[string]string{ LabelTeam: config.TeamName,