diff --git a/nerdctl/setup_buildkit_config_rootless.sh b/nerdctl/setup_buildkit_config_rootless.sh
index e59ff00..a8871b8 100755
--- a/nerdctl/setup_buildkit_config_rootless.sh
+++ b/nerdctl/setup_buildkit_config_rootless.sh
@@ -38,11 +38,13 @@ cat > "$CONFIG_FILE" <<EOF
   enabled = false
 
 [worker.containerd]
+  address = "/run/containerd/containerd.sock"
   enabled = true
   namespace = "buildkit"
   platforms = ["linux/amd64", "linux/arm64"]
   gc = true
   gckeepstorage = 9000
+  snapshotter = "overlayfs"
 
 # 注册表配置，包含多个镜像加速器
 EOF
@@ -60,6 +62,30 @@ for registry in "${!mirrors[@]}"; do
 EOF
 done
 
+# 设置 /run/containerd/containerd.sock 权限
+echo "配置 containerd.sock 的权限..."
+
+# 创建 containerd 组（如果不存在）
+sudo groupadd -f containerd
+
+# 将当前用户添加到 containerd 组
+sudo usermod -aG containerd "$CURRENT_USER"
+
+# 设置 socket 文件的组和权限
+sudo chgrp containerd /run/containerd/containerd.sock
+sudo chmod 660 /run/containerd/containerd.sock
+
+# 重启 BuildKit 服务
+echo "重启 BuildKit 服务..."
+systemctl --user daemon-reload
+systemctl --user start buildkit.service
+systemctl --user enable buildkit.service
+sudo systemctl daemon-reload
+sudo systemctl restart buildkit
+
+# 提示用户重新登录以应用组权限更改
+echo "完成。请重新登录会话以应用对组的更改，使 $CURRENT_USER 可以使用 /run/containerd/containerd.sock。"
+
 # 输出完成信息
 echo "BuildKit 配置文件已生成: $CONFIG_FILE"
 echo "镜像配置已设置完成，详细选项请参考官方文档：https://github.com/moby/buildkit/blob/master/docs/buildkitd.toml.md"