teknium1
2774b48892
fix(docker): heal pairing-dir ownership after docker exec writes ( #10270 )
...
The official Docker image runs the gateway as the unprivileged `hermes`
user (uid 10000) via `gosu`, but `docker exec` defaults to root. Approval
files written by `docker exec <container> hermes pairing approve <code>`
end up as `-rw------- root:root`, and the post-gosu gateway process
cannot read them. The approval is silently ignored — the user keeps
hitting 'Unauthorized user' on every message.
The entrypoint's existing top-level chown is gated on the top-level
$HERMES_HOME being mis-owned, so on warm boots (where /opt/data is
already hermes:hermes) the recursive chown is skipped — meaning a
container restart does NOT self-heal the bug either.
Three-part fix:
1. docker/entrypoint.sh: chown the platforms/pairing/ (and legacy
pairing/) subtree on every container start, regardless of the
top-level decision. The directory is tiny (a few JSON files), so
the unconditional chown is effectively free. Container restart
now self-heals.
2. gateway/pairing.py: PairingStore._load_json was swallowing
PermissionError under its bare 'except OSError' branch, which is
what made this a silent failure. Split it out: log a WARNING that
names the file, the gateway's uid, the file's owner/mode, and the
exact docker exec -u hermes workaround. Still falls back to {} so
the gateway stays up.
3. website/docs/user-guide/security.md: add a Docker tip to the
pairing-CLI section pointing users at `docker exec -u hermes …`
up front.
Reproduced end-to-end in a containerized harness — before the fix
the gateway sees 0 approved users after `docker exec` + restart;
after the fix it sees the expected 1, and the file on disk goes
from `root:root 600` back to `hermes:hermes 600` on next start.
Fixes #10270
2026-05-16 01:57:46 -07:00
..
2026-02-26 03:20:08 +03:00
2026-04-30 01:19:34 -07:00
2026-05-14 07:26:43 -07:00
2026-04-30 20:30:31 -07:00
2026-05-07 05:16:38 -07:00
2026-04-30 04:32:33 -07:00
2026-05-08 14:55:40 -07:00
2026-05-09 11:54:04 -07:00
2026-03-29 21:29:13 -07:00
2026-04-10 16:51:44 -07:00
2026-04-21 00:50:58 -07:00
2026-04-20 04:16:13 -07:00
2026-04-12 18:03:16 -07:00
2026-05-08 14:55:40 -07:00
2026-04-07 03:28:44 -07:00
2026-05-15 01:27:43 -07:00
2026-04-30 19:46:27 -07:00
2026-04-24 05:35:43 -07:00
2026-04-14 16:56:49 -07:00
2026-05-09 01:39:37 -07:00
2026-05-07 05:16:38 -07:00
2026-05-09 13:38:25 -07:00
2026-04-24 16:04:37 -07:00
2026-04-26 18:21:29 -07:00
2026-04-30 04:29:15 -07:00
2026-04-19 01:48:42 -07:00
2026-04-26 12:29:02 -07:00
2026-05-03 03:54:03 -07:00
2026-04-24 03:10:52 -07:00
2026-04-23 19:38:33 -05:00
2026-04-30 23:03:54 -07:00
2026-04-24 02:55:43 -07:00
2026-04-24 02:55:43 -07:00
2026-04-29 07:22:33 -07:00
2026-05-02 02:08:06 -07:00
2026-05-14 15:50:57 -07:00
2026-04-22 11:59:39 -07:00
2026-05-01 14:01:26 -07:00
2026-05-09 11:04:46 -07:00
2026-05-13 17:32:22 -07:00
2026-04-24 03:04:42 -07:00
2026-04-17 04:08:42 -07:00
2026-04-17 04:59:03 -07:00
2026-04-17 05:48:26 -07:00
2026-03-09 02:20:57 -07:00
2026-04-09 23:25:27 -07:00
2026-04-19 18:12:55 -07:00
2026-04-10 05:19:26 -07:00
2026-05-14 07:26:43 -07:00
2026-05-03 03:44:55 -07:00
2026-05-06 18:12:35 -07:00
2026-05-04 12:36:47 -07:00
2026-05-14 15:50:57 -07:00
2026-03-14 09:32:05 -07:00
2026-03-13 08:52:54 -07:00
2026-04-24 03:33:29 -07:00
2026-03-14 14:27:21 +03:00
2026-04-19 11:08:10 -07:00
2026-04-10 03:52:00 -07:00
2026-05-05 04:58:23 -07:00
2026-05-07 05:51:56 -07:00
2026-05-10 22:41:26 -07:00
2026-05-07 05:51:56 -07:00
2026-05-03 03:44:55 -07:00
2026-03-23 06:50:09 -07:00
2026-05-05 10:13:55 -07:00
2026-05-10 22:22:25 -07:00
2026-05-10 18:09:31 -07:00
2026-04-03 13:16:26 -07:00
2026-05-14 14:51:07 -07:00
2026-05-09 13:35:50 -07:00
2026-04-30 23:05:48 -07:00
2026-03-17 01:47:34 -07:00
2026-04-10 21:16:56 -07:00
2026-04-28 06:57:23 -07:00
2026-05-09 02:32:55 -07:00
2026-05-13 17:32:22 -07:00
2026-04-30 20:30:31 -07:00
2026-04-17 19:04:11 -07:00
2026-04-17 19:04:11 -07:00
2026-05-07 05:09:39 -07:00
2026-05-06 10:52:51 -07:00
2026-04-30 20:29:19 -07:00
2026-05-03 17:00:09 -07:00
2026-04-08 20:01:06 -07:00
2026-04-27 07:41:42 -07:00
2026-05-07 06:31:08 -07:00
2026-05-07 17:33:09 -07:00
2026-05-11 07:06:27 -07:00
2026-05-09 02:56:29 -07:00
2026-05-03 08:47:49 -07:00
2026-04-17 01:05:09 -07:00
2026-04-22 16:23:21 -07:00
2026-04-15 17:54:16 -07:00
2026-04-21 01:33:10 -07:00
2026-03-15 03:50:45 -07:00
2026-05-09 02:56:29 -07:00
2026-05-10 14:27:59 -07:00
2026-04-27 19:09:32 -07:00
2026-05-10 06:40:46 -07:00
2026-04-27 21:22:44 -07:00
2026-04-27 21:22:44 -07:00
2026-04-16 20:43:41 -07:00
2026-05-13 17:32:22 -07:00
2026-04-17 01:05:09 -07:00
2026-04-26 18:20:17 -07:00
2026-02-28 03:38:27 -05:00
2026-04-26 18:51:51 -07:00
2026-04-26 18:31:24 -07:00
2026-04-10 03:07:00 -07:00
2026-04-10 02:58:42 -07:00
2026-05-08 10:29:58 -07:00
2026-04-30 20:26:35 -07:00
2026-05-01 13:33:06 -07:00
2026-05-16 01:57:46 -07:00
2026-04-30 05:00:25 -07:00
2026-04-18 19:32:26 -07:00
2026-04-19 03:03:57 -07:00
2026-04-10 03:44:43 -07:00
2026-05-07 05:20:10 -07:00
2026-05-08 10:29:58 -07:00
2026-05-02 02:23:37 -07:00
2026-05-15 14:32:14 -07:00
2026-05-13 22:20:30 -07:00
2026-04-29 21:56:51 -07:00
2026-05-07 05:04:37 -07:00
2026-04-24 03:02:03 -07:00
2026-04-24 14:31:04 -07:00
2026-05-13 23:13:25 -07:00
2026-04-26 11:55:09 -07:00
2026-04-30 20:40:46 -07:00
2026-04-29 21:07:47 -07:00
2026-05-02 02:00:11 -07:00
2026-05-09 14:47:33 -07:00
2026-04-21 13:33:02 -07:00
2026-05-12 18:49:33 -07:00
2026-05-07 05:16:38 -07:00
2026-04-17 21:17:33 -07:00
2026-05-07 05:05:34 -07:00
2026-04-29 04:57:22 -07:00
2026-03-14 21:19:22 -07:00
2026-03-10 23:34:52 -07:00
2026-05-07 05:04:37 -07:00
2026-04-26 05:47:37 -07:00
2026-05-06 10:52:51 -07:00
2026-05-15 14:32:14 -07:00
2026-05-15 14:32:14 -07:00
2026-04-26 07:15:23 -07:00
2026-05-07 05:49:16 -07:00
2026-04-28 06:50:04 -07:00
2026-05-08 18:50:25 -07:00
2026-03-27 04:03:13 -07:00
2026-04-30 04:28:08 -07:00
2026-04-04 19:05:34 -07:00
2026-04-25 08:21:14 -07:00
2026-05-09 14:18:20 +03:00
2026-04-10 03:01:59 -07:00
2026-04-16 02:26:14 -07:00
2026-04-28 05:43:12 -07:00
2026-04-25 18:47:53 -07:00
2026-04-26 18:49:48 -07:00
2026-05-07 06:29:27 -07:00
2026-04-26 19:01:50 -07:00
2026-04-30 20:37:27 -07:00
2026-05-15 01:25:42 -07:00
2026-04-23 05:15:52 -07:00
2026-04-17 15:18:23 -07:00
2026-04-20 03:10:19 -07:00
2026-05-14 15:50:57 -07:00
2026-04-12 13:05:56 -07:00
2026-04-21 00:54:46 -07:00
2026-04-26 12:51:53 -07:00
2026-05-10 09:01:51 -07:00
2026-04-27 06:41:16 -07:00
2026-04-29 04:38:17 -07:00
2026-04-30 04:28:08 -07:00
2026-04-30 19:42:59 -07:00
2026-05-15 01:41:30 -07:00
2026-04-26 12:35:16 -07:00
2026-04-26 18:25:41 -07:00
2026-05-07 06:54:29 -07:00
2026-05-13 18:58:14 -07:00
2026-05-10 12:33:54 -07:00
2026-05-10 12:33:54 -07:00
2026-05-04 05:25:09 -07:00
2026-03-27 11:33:19 -07:00
2026-03-15 23:04:34 -07:00
2026-04-30 20:41:18 -07:00
2026-05-12 16:33:09 -07:00
2026-04-18 04:17:18 -07:00
2026-04-02 20:54:27 -07:00
2026-03-01 05:28:12 -08:00
2026-05-10 20:02:50 -07:00
2026-04-26 17:26:37 -07:00
2026-05-10 15:20:40 -07:00
2026-05-10 22:02:56 -07:00
2026-04-11 14:43:53 -07:00
2026-04-14 17:08:35 -07:00
2026-05-08 11:18:14 -07:00
2026-05-09 02:56:29 -07:00
2026-05-14 07:47:52 -07:00
2026-04-07 14:08:59 -07:00
2026-05-12 16:33:33 -07:00
2026-04-11 13:59:52 -07:00
2026-05-07 04:51:46 -07:00
2026-05-14 07:47:52 -07:00
2026-05-09 11:54:04 -07:00
2026-04-20 00:10:22 -07:00
2026-05-14 07:47:52 -07:00
2026-05-02 01:55:04 -07:00
2026-05-05 04:42:59 -07:00
2026-04-13 10:50:24 -07:00
2026-05-12 17:02:29 -07:00
2026-05-05 04:58:23 -07:00
2026-05-09 11:10:36 -07:00
2026-05-10 22:22:25 -07:00
2026-03-17 02:49:57 -07:00
2026-05-09 01:39:37 -07:00
2026-05-09 11:04:46 -07:00
2026-04-21 06:23:09 -07:00
2026-04-19 00:09:38 -07:00
2026-05-04 03:14:50 -07:00
2026-05-13 14:53:04 -07:00
2026-05-12 13:59:22 -04:00
2026-04-29 21:07:55 -07:00
2026-05-02 02:00:09 -07:00
2026-04-22 16:23:21 -07:00
2026-04-30 20:19:23 -07:00
2026-05-12 13:59:22 -04:00
2026-04-21 01:56:35 -07:00
2026-05-12 13:59:22 -04:00
2026-04-27 12:37:33 -07:00
2026-05-09 01:39:37 -07:00
2026-04-19 22:36:00 -07:00
2026-04-12 18:05:41 -07:00
2026-05-07 07:38:43 -07:00
2026-05-07 07:38:43 -07:00
2026-03-28 14:33:35 -07:00
2026-04-07 17:27:09 -07:00
2026-04-19 22:45:08 -07:00
2026-04-11 15:22:49 -07:00
2026-05-07 05:09:39 -07:00
2026-05-07 06:08:06 -07:00
2026-05-15 14:32:14 -07:00
2026-05-13 23:11:20 -07:00
2026-05-14 09:59:03 -07:00
2026-03-17 10:44:37 -07:00
2026-04-14 01:43:45 -07:00
2026-04-13 16:32:04 -07:00