From 777a672ce5863d4e1e7e00df85025398582fb663 Mon Sep 17 00:00:00 2001
From: sunnysktsang <10227666+sunnysktsang@users.noreply.github.com>
Date: Sat, 2 May 2026 06:44:25 +0800
Subject: [PATCH] fix: align agent UID/GID with webui in compose files (#1399)

Both docker-compose files had a UID mismatch between the agent
(defaults to 10000) and webui (defaults to 1000). When containers
share a volume, the webui gets Permission denied reading files
written by the agent.

- docker-compose.two-container.yml: add HERMES_UID/HERMES_GID
  (was missing entirely)
- docker-compose.three-container.yml: change default from 10000
  to 1000 to match webui's WANTED_UID/WANTED_GID

Fixes #1399
---
 docker-compose.three-container.yml | 12 ++++++++----
 docker-compose.two-container.yml   |  4 ++++
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/docker-compose.three-container.yml b/docker-compose.three-container.yml
index 93031144..71f8466e 100644
--- a/docker-compose.three-container.yml
+++ b/docker-compose.three-container.yml
@@ -34,8 +34,10 @@ services:
       - hermes-agent-src:/opt/hermes
     environment:
       - HERMES_HOME=/home/hermes/.hermes
-      - HERMES_UID=${HERMES_UID:-10000}
-      - HERMES_GID=${HERMES_GID:-10000}
+      # Align UID/GID across containers sharing the hermes-home volume.
+      # Defaults to 1000 to match WANTED_UID/WANTED_GID in the webui service.
+      - HERMES_UID=${UID:-1000}
+      - HERMES_GID=${GID:-1000}
     restart: unless-stopped
     deploy:
       resources:
@@ -55,8 +57,10 @@ services:
       - hermes-home:/home/hermes/.hermes
     environment:
       - HERMES_HOME=/home/hermes/.hermes
-      - HERMES_UID=${HERMES_UID:-10000}
-      - HERMES_GID=${HERMES_GID:-10000}
+      # Align UID/GID across containers sharing the hermes-home volume.
+      # Defaults to 1000 to match WANTED_UID/WANTED_GID in the webui service.
+      - HERMES_UID=${UID:-1000}
+      - HERMES_GID=${GID:-1000}
       # Dashboard connects to the gateway for health/session data
       - GATEWAY_HEALTH_URL=http://hermes-agent:8642
     depends_on:
diff --git a/docker-compose.two-container.yml b/docker-compose.two-container.yml
index 19890d0e..bb4a02a6 100644
--- a/docker-compose.two-container.yml
+++ b/docker-compose.two-container.yml
@@ -45,6 +45,10 @@ services:
       - hermes-agent-src:/opt/hermes
     environment:
       - HERMES_HOME=/home/hermes/.hermes
+      # Align UID/GID across containers sharing the hermes-home volume.
+      # Defaults to 1000 to match WANTED_UID/WANTED_GID in the webui service.
+      - HERMES_UID=${UID:-1000}
+      - HERMES_GID=${GID:-1000}
     restart: unless-stopped
     networks:
       - hermes-net