diff --git a/Dockerfile b/Dockerfile
index df18376..74021f2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -43,6 +43,7 @@ RUN apt-get update \
         python3-pip \
         python3-venv \
         ripgrep \
+        sudo \
         tar \
         tree \
         unzip \
@@ -54,17 +55,21 @@ RUN apt-get update \
     && update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac \
     # && rm -rf /var/lib/apt/lists/*
     && echo 'en_US.UTF-8 UTF-8' > /etc/locale.gen \
-    && echo 'root:admin' | chpasswd \
     && locale-gen
 
+COPY ./certs /usr/local/share/ca-certificates
+RUN update-ca-certificates
+ENV NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
+
 # Runtime user
 RUN groupadd --gid "${DEV_GID}" dev \
     && useradd \
         --uid "${DEV_UID}" \
         --gid "${DEV_GID}" \
         --create-home \
-        --shell /bin/bash \
-        dev
+        --shell /bin/bash dev \
+    && echo 'dev ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/dev \
+    && chmod 0440 /etc/sudoers.d/dev
 
 # Node.js + OpenCode
 RUN curl -fsSLO \