Bug Description

it says: 10000 user(but the hermes-webui is 1000) mkdir /root failure(even previledged).I don't know why u mkdir /root?in production it is forbidden and unecessary. and the mount dir host:docker is unclear and frustrating.

Steps to Reproduce

Three-container Docker Compose: Hermes Agent + Dashboard + WebUI

This extends the two-container setup with the Hermes Dashboard for

monitoring agent activity, sessions, and resource usage.

Usage:

docker compose -f docker-compose.three-container.yml up -d

Services:

hermes-agent — gateway API on port 8642 (CLI, Telegram, cron, tools)

hermes-dashboard — monitoring dashboard on port 9119

hermes-webui — browser chat interface on port 8787

All three share the same hermes-home volume so config, sessions,

skills, and memory are consistent across all surfaces.

services: hermes-agent: image: nousresearch/hermes-agent:latest container_name: hermes-agent command: gateway run #privileged: true user: root ports: - "127.0.0.1:8642:8642" volumes: # Persist config, state, sessions, skills, memory across restarts - /mnt/data/hermes-allinone:/root/.hermes # Expose agent source so the WebUI can install dependencies from it #- /mnt/data/hermes-allinone/hermes-agent-src:/opt/hermes environment: - HERMES_HOME=/root/.hermes restart: unless-stopped deploy: resources: limits: memory: 4G cpus: "2.0" networks: - hermes-net

hermes-dashboard: image: nousresearch/hermes-agent:latest container_name: hermes-dashboard command: dashboard --host 0.0.0.0 --insecure ports: - "127.0.0.1:9119:9119" volumes: - /mnt/data/hermes-allinone:/root/.hermes environment: - HERMES_HOME=/root/.hermes # Dashboard connects to the gateway for health/session data - GATEWAY_HEALTH_URL=http://hermes-agent:8642 depends_on: - hermes-agent restart: unless-stopped deploy: resources: limits: memory: 512M cpus: "0.5" networks: - hermes-net

hermes-webui: image: ghcr.io/nesquena/hermes-webui:latest container_name: hermes-webui depends_on: - hermes-agent ports: # Expose on localhost only. Remove 127.0.0.1: to expose on all interfaces # (set HERMES_WEBUI_PASSWORD if doing so). #- "127.0.0.1:8787:8787" - "8787:8787" volumes: # Same hermes home as the agent — shares config, sessions, state - /mnt/data/hermes-allinone:/home/hermeswebui/.hermes # Agent source mounted where docker_init.bash expects it. # At startup the init script runs: # uv pip install /home/hermeswebui/.hermes/hermes-agent # which installs the agent and all its Python dependencies. - /mnt/data/hermes-allinone/hermes-agent-src:/home/hermeswebui/.hermes/hermes-agent # Workspace directory — browse and edit files from the WebUI. # Use HERMES_WORKSPACE env var, default to /mnt/data/hermes-allinone/workspace - ${HERMES_WORKSPACE:-/mnt/data/hermes-allinone/workspace}:/workspace environment: - HERMES_WEBUI_HOST=0.0.0.0 - HERMES_WEBUI_PORT=8787 - HERMES_WEBUI_STATE_DIR=/home/hermeswebui/.hermes/webui # Match your host user's UID/GID for correct file permissions. # Run id -u and id -g to find your values. # On macOS, UIDs start at 501 (not 1000) — set these in a .env file: # echo "UID=$(id -u)" >> .env && echo "GID=$(id -g)" >> .env - WANTED_UID=${UID:-10000} - WANTED_GID=${GID:-10000} # Optional: set a password for remote access # - HERMES_WEBUI_PASSWORD=your-secret-password restart: unless-stopped networks: - hermes-net

networks: hermes-net: driver: bridge

Expected Behavior

update ur docker image ,check ur docs and rewrite.

Actual Behavior

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

Dropping root privileges

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

Dropping root privileges

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

mkdir: cannot create directory '/root': Permission denied

Affected Component

Other

Messaging Platform (if gateway-related)

No response

Debug Report

not up yet

Operating System

root@xbase:/mnt/data# uname -r 6.6.127

Python Version

No response

Hermes Version

No response

Additional Logs / Traceback (optional)

Root Cause Analysis (optional)

No response

Proposed Fix (optional)

No response

Are you willing to submit a PR for this?

• I'd like to fix this myself and submit a PR