diff --git a/.drone.yml b/.drone.yml
index a3bdec6e..e80d6df7 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -28,7 +28,7 @@ volumes:
 steps:
   - name: package-docker
     image: docker:27-cli
-    privileged: true
+    # 通过挂载宿主机 docker.sock 构建，无需 privileged（未 trusted 时 privileged 会被拒绝）
     volumes:
       - name: dockersock
         path: /var/run/docker.sock