diff --git a/bin/docker/Dockerfile b/bin/docker/Dockerfile
index 00568a43de40b3e253a9ad6e578e7ac1551e57ea..e212a778ec9a6024fb07797a192ed0e221b9e6ac 100644
--- a/bin/docker/Dockerfile
+++ b/bin/docker/Dockerfile
@@ -4,11 +4,10 @@ ENV FC_LANG en-US
 ENV LC_CTYPE en_US.UTF-8
 
 # dependencies
-RUN apk add --update bash ttf-dejavu fontconfig
+RUN apk add --no-cache bash ttf-dejavu fontconfig
 
 # add Metabase jar
 COPY ./metabase.jar /app/
-RUN chmod o+r /app/metabase.jar
 
 # add our run script to the image
 COPY ./run_metabase.sh /app/
diff --git a/bin/docker/run_metabase.sh b/bin/docker/run_metabase.sh
index af607b04b3676e63c7625b6f6fb600dee4f60b92..f4f0695c9e85fb35334cc74fda7edb1cf3916977 100755
--- a/bin/docker/run_metabase.sh
+++ b/bin/docker/run_metabase.sh
@@ -119,6 +119,9 @@ if [ ! -z "$JAVA_TIMEZONE" ]; then
     JAVA_OPTS="${JAVA_OPTS} -Duser.timezone=${JAVA_TIMEZONE}"
 fi
 
+# Ensure JAR file is world readable
+chmod o+r /app/metabase.jar
+
 # Initialize the Metabase db from H2 dump, if available
 INITIAL_DB=$(ls /app/initial*.db 2> /dev/null | head -n 1)
 if [ -f "${INITIAL_DB}" ]; then