diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index e846dd1..ec37cfa 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -30,8 +30,9 @@ jobs:
 
     - name: Create builder user
       run: |
-        useradd -m builder
-        echo "builder ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
+        id -u builder &>/dev/null || useradd -m builder
+        echo "builder ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/builder
+        chmod 440 /etc/sudoers.d/builder
 
     - name: Build packages
       run: python build-packages.py