diff --git a/.github/workflows/release-master.yaml b/.github/workflows/release-master.yaml
index 248f89c15..7cba72a0f 100644
--- a/.github/workflows/release-master.yaml
+++ b/.github/workflows/release-master.yaml
@@ -19,9 +19,9 @@ jobs:
         uses: actions/checkout@v3
       - name: docker build
         # master branch alway use latest tag
-        run: TAG=latest make docker
+        run: sudo TAG=latest make docker
       - name: login registry
         # This is where you will update the PAT to GITHUB_TOKEN
         run: echo "${{ secrets.GH_PAT }}" | docker login ghcr.io -u $ --password-stdin
       - name: docker push
-        run: docker push ghcr.io/kmesh-net/kmesh:latest
+        run: docker push ghcr.io/kmesh-net/kmesh:latest
\ No newline at end of file
diff --git a/build/docker/kmesh.dockerfile b/build/docker/kmesh.dockerfile
index c59eaddca..f5ba950a1 100644
--- a/build/docker/kmesh.dockerfile
+++ b/build/docker/kmesh.dockerfile
@@ -11,9 +11,9 @@ RUN \
     --mount=type=cache,target=/var/cache/dnf \
     yum install -y kmod util-linux iptables
 
-ADD out/$arch/*so* /usr/lib64/
-ADD out/$arch/kmesh-daemon /usr/bin/
-ADD out/$arch/kmesh-cni /usr/bin/
-ADD out/$arch/mdacore /usr/bin/
-ADD build/docker/start_kmesh.sh /kmesh
-ADD out/$arch/ko /kmesh
+COPY out/$arch/*so* /usr/lib64/
+COPY out/$arch/kmesh-daemon /usr/bin/
+COPY out/$arch/kmesh-cni /usr/bin/
+COPY out/$arch/mdacore /usr/bin/
+COPY build/docker/start_kmesh.sh /kmesh
+COPY out/$arch/ko /kmesh