diff --git a/certmgr/Dockerfile b/certmgr/Dockerfile
index 0017ff6db0..6215f45c87 100644
--- a/certmgr/Dockerfile
+++ b/certmgr/Dockerfile
@@ -29,10 +29,10 @@ RUN apt-get update && \
         /usr/local/aws-cli/v2/*/dist/awscli/data/ac.index \
         /usr/local/aws-cli/v2/*/dist/awscli/examples
 
-RUN mkdir /scripts
+RUN mkdir -p /opt/certmgr
 
-WORKDIR /scripts
+WORKDIR /opt/certmgr
 
-COPY scripts/*.py .
+COPY scripts/*.py ./
 
 ENTRYPOINT ["./entrypoint.py"]
diff --git a/certmgr/scripts/func.py b/certmgr/scripts/func.py
index a57abfe418..03fa389097 100644
--- a/certmgr/scripts/func.py
+++ b/certmgr/scripts/func.py
@@ -39,7 +39,7 @@ def update_link(src: Path, dest: Path) -> None:
     print(f"linking {src} to {dest}")
     if dest.exists():
         if dest.is_symlink():
-            link_target: str = dest.readlink()
+            link_target: str = os.readlink(dest)
             if link_target != src:
                 dest.unlink()
             else:
diff --git a/certmgr/scripts/letsencrypt_cert.py b/certmgr/scripts/letsencrypt_cert.py
index cd185321ca..682c960d43 100644
--- a/certmgr/scripts/letsencrypt_cert.py
+++ b/certmgr/scripts/letsencrypt_cert.py
@@ -41,7 +41,7 @@ def create(self, force: bool = False) -> None:
 
         is_letsencrypt_cert = False
         if self.nginx_cert_dir.is_symlink():
-            link_target = self.nginx_cert_dir.readlink()
+            link_target = os.readlink(self.nginx_cert_dir)
             if link_target == self.cert_dir:
                 is_letsencrypt_cert = True