diff --git a/packaging/systemd/cri-docker.service b/packaging/systemd/cri-docker.service
index 52e66ef67..ee5f4d56d 100644
--- a/packaging/systemd/cri-docker.service
+++ b/packaging/systemd/cri-docker.service
@@ -7,6 +7,7 @@ Requires=cri-docker.socket
 
 [Service]
 Type=notify
+User=root
 ExecStart=/usr/bin/cri-dockerd --container-runtime-endpoint fd://
 ExecReload=/bin/kill -s HUP $MAINPID
 TimeoutSec=0