diff --git a/Dockerfile b/Dockerfile
index f00ef060c8d..3e316e87a1b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -43,6 +43,7 @@ RUN --mount=type=cache,id=ragflow_apt,target=/var/cache/apt,sharing=locked \
     fi; \
     rm -f /etc/apt/apt.conf.d/docker-clean && \
     echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' > /etc/apt/apt.conf.d/keep-cache && \
+    chmod 1777 /tmp && \
     apt update && \
     apt --no-install-recommends install -y ca-certificates && \
     apt update && \
diff --git a/Dockerfile.deps b/Dockerfile.deps
index 438ab5ce9fe..c16ad446201 100644
--- a/Dockerfile.deps
+++ b/Dockerfile.deps
@@ -1,6 +1,6 @@
 # This builds an image that contains the resources needed by Dockerfile
 #
-FROM ubuntu:22.04
+FROM scratch
 
 # Copy resources downloaded via download_deps.py
 COPY chromedriver-linux64-121-0-6167-85 chrome-linux64-121-0-6167-85 cl100k_base.tiktoken libssl1.1_1.1.1f-1ubuntu2_amd64.deb libssl1.1_1.1.1f-1ubuntu2_arm64.deb tika-server-standard-3.0.0.jar tika-server-standard-3.0.0.jar.md5 libssl*.deb /