diff --git a/deploy/container/Containerfile b/deploy/container/Containerfile
index a193316..4916e9c 100644
--- a/deploy/container/Containerfile
+++ b/deploy/container/Containerfile
@@ -12,14 +12,14 @@ ENV AGENTRUN_APP_ROOT=/workspace/agentrun
 ENV AGENTRUN_BOOT_REPO_URL=http://git-mirror-http.devops-infra.svc.cluster.local/pikasTech/agentrun.git
 
 RUN HTTP_PROXY="$HTTP_PROXY" HTTPS_PROXY="$HTTPS_PROXY" NO_PROXY="$NO_PROXY" http_proxy="$HTTP_PROXY" https_proxy="$HTTPS_PROXY" no_proxy="$NO_PROXY" \
-  apk add --no-cache ca-certificates curl git github-cli kubectl nodejs npm openssh-client ripgrep
+  apk add --no-cache ca-certificates curl git github-cli kubectl nodejs npm openssh-client ripgrep tini
 
 COPY package.json bun.lock tsconfig.json ./
 RUN HTTP_PROXY="$HTTP_PROXY" HTTPS_PROXY="$HTTPS_PROXY" NO_PROXY="$NO_PROXY" http_proxy="$HTTP_PROXY" https_proxy="$HTTPS_PROXY" no_proxy="$NO_PROXY" \
   bun install --production
 RUN /opt/agentrun/node_modules/.bin/codex --version && /opt/agentrun/node_modules/.bin/codex app-server --help >/dev/null
 RUN set -eu; \
-  for tool in bun node npm git ssh gh rg curl kubectl; do command -v "$tool" >/dev/null; done; \
+  for tool in bun node npm git ssh gh rg curl kubectl tini; do command -v "$tool" >/dev/null; done; \
   bun --version >/tmp/agentrun-work-ready-smoke.txt; \
   node --version >>/tmp/agentrun-work-ready-smoke.txt; \
   npm --version >>/tmp/agentrun-work-ready-smoke.txt; \
@@ -33,4 +33,5 @@ COPY deploy/runtime/boot ./deploy/runtime/boot
 RUN chmod +x /opt/agentrun/deploy/runtime/boot/*.sh
 
 EXPOSE 8080
+ENTRYPOINT ["/sbin/tini", "--"]
 CMD ["/opt/agentrun/deploy/runtime/boot/agentrun-mgr.sh"]