diff --git a/docker/Dockerfile.soda b/docker/Dockerfile.soda
index 654e42a18568081238c2771082fbb429cd59ea5d..8fe766512e02dc1fa4213cb281ac5d2c483b5050 100644
--- a/docker/Dockerfile.soda
+++ b/docker/Dockerfile.soda
@@ -12,7 +12,6 @@ ENV CATALINA_BASE=/usr/local/tomcat
 ENV CATALINA_HOME=/usr/local/tomcat
 
 WORKDIR /root
-ENV HOME=/root
 
 # pre-configure port 8080 (no TSL)
 COPY deps/server.xml deps/server-connector.xml* ${CATALINA_BASE}/conf/
@@ -60,16 +59,20 @@ RUN echo "${INST_DIR}/lib" > /etc/ld.so.conf.d/ast.conf && ldconfig \
 
 COPY deps/context.xml ${WEBAPP_DIR}/META-INF/context.xml
 
-# enable SKA IAM token filter update
+# enable IA2 token filter update
 RUN chmod -R a+rwX ${WEBAPP_DIR}/WEB-INF \
  && touch  ${WEBAPP_DIR}/WEB-INF/classes/ia2token.properties \
  && touch  ${WEBAPP_DIR}/WEB-INF/classes/iamtoken.properties \
  && chmod a+rw ${WEBAPP_DIR}/WEB-INF/classes/*.properties
 
-# configure during start-up
-COPY start-soda.sh /root/start-soda.sh
+RUN groupadd --gid 1000 admin \
+ && useradd --uid 1000 --gid admin --shell /bin/bash --create-home --no-log-init admin
 
-RUN chmod +rx /root && chmod +rx /root/start-soda.sh
-USER 1000:1000
-CMD ["sh", "-c", "/root/start-soda.sh"]
+COPY start-soda.sh /home/admin/start-soda.sh
+RUN chown admin:admin /home/admin/start-soda.sh
+
+USER admin
+WORKDIR /home/admin
+
+CMD ["/home/admin/start-soda.sh"]
 
diff --git a/docker/example-compose-soda.yaml b/docker/example-compose-soda.yaml
index 02827887a4bb03a509d1ed18dac6160a52d43ee7..9caa6e80e8d8c46abdcbcccceb0c5d24c012f66d 100644
--- a/docker/example-compose-soda.yaml
+++ b/docker/example-compose-soda.yaml
@@ -3,6 +3,7 @@ services:
 
   vlkb:
     container_name: vlkb
+    hostname: soda
     image: soda:latest
     ports:
       - 8080:8080
diff --git a/docker/start-soda.sh b/docker/start-soda.sh
index 80d9b696ab7bc9eb0668fbfb2f0355cd0589b5d8..3e40904d5b2dfa322823dd138e4e1a39ffe22036 100755
--- a/docker/start-soda.sh
+++ b/docker/start-soda.sh
@@ -109,5 +109,5 @@ sed -i "s/.*AuthZ\.level.*=.*/AuthZ.level = $DBG_LEVEL/g" $CATALINA_BASE/conf/so
 date
 } 1> /tmp/start-soda.log 2>&1
 
-$CATALINA_HOME/bin/catalina.sh run
+exec $CATALINA_HOME/bin/catalina.sh run