diff --git a/Dockerfile b/Dockerfile
index 8ff88c5..986f5c1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -50,6 +50,8 @@ RUN mkdir -p /var/run/sshd && \
     chmod 775 /var/run/sshd
 
 # Custom sshd_config for non-root usage
+# StrictModes no: Required for non-root / random UID environments
+# PidFile: Point to /tmp for guaranteed write access
 RUN echo "Port 2222
 PermitRootLogin no
 PasswordAuthentication no
@@ -70,13 +72,21 @@ RUN useradd -m -s /bin/bash -u 1000 claw && \
     chmod -R g+rwX /home/claw
 
 # Prepare volume mount point
+# Mount persistent storage here
 VOLUME /data
 RUN mkdir -p /data && \
     chown claw:claw /data && \
     chmod 775 /data
 
+# Set working directory to the persistent volume
 WORKDIR /data
+
+# Expose SSH port (non-privileged)
 EXPOSE 2222
+
+# Switch to user 'claw' (UID 1000)
 USER claw
 
+# Start SSH daemon
+# Fix: StrictModes no handles permissions, but chmod 600 helps sanity.
 CMD ["/bin/bash", "-c", "mkdir -p /data/ssh && if [ ! -f /data/ssh/ssh_host_rsa_key ]; then     echo 'Generating persistent host keys...';     ssh-keygen -f /data/ssh/ssh_host_rsa_key -N '' -t rsa;     ssh-keygen -f /data/ssh/ssh_host_ecdsa_key -N '' -t ecdsa;     ssh-keygen -f /data/ssh/ssh_host_ed25519_key -N '' -t ed25519; fi && chmod 600 /data/ssh/ssh_host_*_key && /usr/sbin/sshd -D -f /etc/ssh/sshd_config"]