diff --git a/.ci/docker-compose.yml b/.ci/docker-compose.yml
index a2f32cb..a470c52 100644
--- a/.ci/docker-compose.yml
+++ b/.ci/docker-compose.yml
@@ -57,12 +57,11 @@ services:
         condition: service_healthy
 
   kong-gen-cert:
-    user: "1001:127"
     # Using a empty string as the fallback makes this env optional but still fails if not set when used
     image: "kong/kong:nightly-ubuntu"
     security_opt:
       - no-new-privileges:true
     command: >-
-      sh -c "id && kong hybrid gen_cert /tmp/hybrid/cluster.crt /tmp/hybrid/cluster.key"
+      sh -c "id && stat /tmp/hybrid && /tmp/hybrid && kong hybrid gen_cert /tmp/hybrid/cluster.crt /tmp/hybrid/cluster.key"
     volumes:
-      - "${GITHUB_WORKSPACE:-.}/hybrid:/tmp/hybrid"
\ No newline at end of file
+      - "${GITHUB_WORKSPACE:-.}/hybrid:/tmp/hybrid:rw"
\ No newline at end of file
diff --git a/.github/workflows/test_container_perm.yml b/.github/workflows/test_container_perm.yml
index 2cd2b9f..e5dcaa8 100644
--- a/.github/workflows/test_container_perm.yml
+++ b/.github/workflows/test_container_perm.yml
@@ -20,3 +20,4 @@ jobs:
         run: |
           id
           docker compose -f .ci/docker-compose.yml up kong-gen-cert
+          stat ./hybrid