diff --git a/binder/Dockerfile b/binder/Dockerfile
index df6761d3a1..17d9f2e9fa 100644
--- a/binder/Dockerfile
+++ b/binder/Dockerfile
@@ -1,5 +1,21 @@
 # Copyright (c) Jupyter Development Team.
 # Distributed under the terms of the Modified BSD License.
-FROM jupyter/base-notebook:aec555e49be6
+
+# https://hub.docker.com/r/jupyter/base-notebook/tags
+ARG BASE_CONTAINER=jupyter/base-notebook:aec555e49be6
+FROM $BASE_CONTAINER
+
+LABEL maintainer="Jupyter Project <jupyter@googlegroups.com>"
 ENV TAG="aec555e49be6"
+
 COPY binder/README.ipynb .
+
+# Fix permissions on README.ipynb as root
+USER root
+
+RUN fix-permissions README.ipynb
+
+# Switch back to jovyan to avoid accidental container runs as root
+USER $NB_UID
+
+WORKDIR $HOME