diff --git a/Makefile b/Makefile
index eff29bcbd498031423fd790ae5900f31d74438f5..4e746635324bb1c8171b494a2bf7ff5730501941 100644
--- a/Makefile
+++ b/Makefile
@@ -26,17 +26,19 @@ LD_FLAGS := -ldflags '-buildid=none -tmpdir=$(TMP_DIR) \
 	-X isula.org/rubik/pkg/version.BuildTime=$(BUILD_TIME) \
 	-X isula.org/rubik/pkg/version.Version=$(VERSION) \
 	-X isula.org/rubik/pkg/version.Release=$(RELEASE) \
-	-extldflags=-ftrapv \
-	-extldflags=-Wl,-z,relro,-z,now -linkmode=external -extldflags=-static'
+	-buildmode=pie \
+	-extldflags=-ftrapv -extldflags=-zrelro -extldflags=-znow \
+	-linkmode=external \
+	-extldflags "-static-pie -Wl,-z,now"'
 
-export GO111MODULE=off
+export GO111MODULE=on
 
 GO_BUILD=CGO_ENABLED=1 \
 	CGO_CFLAGS="-fstack-protector-strong -fPIE" \
 	CGO_CPPFLAGS="-fstack-protector-strong -fPIE" \
 	CGO_LDFLAGS_ALLOW='-Wl,-z,relro,-z,now' \
 	CGO_LDFLAGS="-Wl,-z,relro,-z,now -Wl,-z,noexecstack" \
-	go build -buildmode=pie
+	go build -mod=vendor
 
 all: release