diff --git a/kuasar.spec b/kuasar.spec
index 5f516ae39720077daaf9cc6cf94e717fd794c9aa..b82f823075c2ae826a851acaafa220cf1e0dc28d 100644
--- a/kuasar.spec
+++ b/kuasar.spec
@@ -2,7 +2,7 @@
 
 Name: kuasar
 Version: 0.1.0
-Release: 1
+Release: 2
 Summary: Kuasar is an efficient container runtime that supports multiple sandbox techniques.
 License: Apache License 2.0
 URL: https://github.com/kuasar-io/kuasar
@@ -39,6 +39,8 @@ cp %{kuasarbuilddir}/vmm/scripts/kernel/stratovirt/kuasar-openeuler-kernel-aarch
 %build
 # build vmm-sandboxer and vmm-task
 cd %{kuasarbuilddir}
+sed -i '$a\[build\]\nrustflags = \["-Clink-arg=-s", "-Clink-arg=-Wl,-z,relro,-z,now"]' ./vmm/sandbox/.cargo/config.toml
+sed -i '$a\[build\]\nrustflags = \["-Clink-arg=-s", "-Clink-arg=-Wl,-z,relro,-z,now", "-Clink-arg=-static-pie"]' ./vmm/task/.cargo/config.toml
 HYPERVISOR=%{hypervisor} make bin/vmm-sandboxer
 %ifarch %{ix86} x86_64
 ARCH=x86_64 HYPERVISOR=%{hypervisor} make bin/vmm-task
@@ -83,6 +85,9 @@ rm -rf %{buildroot}
 %config(noreplace) %{kuasarconfdir}/config_%{hypervisor}.toml
 
 %changelog
+* Tue Aug 29 Vanient <xiadanni1@huawei.com> - 0.1.0-2
+- optimize compile options
+
 * Thu Aug 24 Vanient <xiadanni1@huawei.com> - 0.1.0-1
 - update to 0.1.0