diff --git a/docker-compose.yml b/docker-compose.yml
index 45219b0..d45cc70 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -41,6 +41,9 @@ services:
   downloader:
     image: curlimages/curl:latest
     profiles: ["tools"]
+    # ponytail: named volume is created root-owned; curl_user (uid 100) can't
+    # write into it otherwise, so run as root for this one-off job.
+    user: root
     volumes:
       - models:/models
     entrypoint: ["sh", "-c"]