diff --git a/build/Dockerfile b/build/Dockerfile
index 701bce4..ec90132 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -33,7 +33,8 @@ RUN apt-get update && \
     ln -sf /etc/piler/piler-nginx.conf /etc/nginx/sites-enabled && \
     echo "www-data ALL=NOPASSWD: /etc/init.d/rc.piler reload" > /etc/sudoers.d/piler && \
     rm -f ${PACKAGE}_${TARGETARCH}.deb /etc/nginx/sites-enabled/default /etc/piler/piler.key /etc/piler/piler.pem /etc/piler/config-site.php && \
-    crontab -u $PILER_USER /usr/share/piler/piler.cron
+    crontab -u $PILER_USER /usr/share/piler/piler.cron \
+    sed -i '/imklog/s/^/#/' /etc/rsyslog.conf
 
 VOLUME ["/etc/piler","/var/piler/store","/var/piler/manticore","/var/piler/imap","/var/piler/stat","/var/spool/cron/crontabs"]
 
@@ -44,8 +45,7 @@ EXPOSE 443/tcp
 # Clean up APT when done.
 RUN apt clean && \
     apt autoremove && \
-    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \
-    sed -i '/imklog/s/^/#/' /etc/rsyslog.conf
+    rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
 
 COPY start.sh /start.sh
 
diff --git a/build/start.sh b/build/start.sh
index 20913f3..474024c 100644
--- a/build/start.sh
+++ b/build/start.sh
@@ -190,7 +190,9 @@ start_services() {
    service cron start
    service php8.3-fpm start
    service nginx start
-   rsyslogd
+   #rsyslogd
+   rm -f /run/rsyslogd.pid
+   service rsyslog start
 }