From 9243d0c9d0e6b10130b32d080509e57daab28229 Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Fri, 15 May 2026 00:09:43 +0200
Subject: [PATCH] fix(Dockerfile): loosen image-baked dir modes for rootless
 runtimes

---
 Dockerfile | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 4688298d..241f0d1e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -46,8 +46,10 @@ WORKDIR /apptoo
 # UID/GID alignment and filesystem preparation, then execs the server as this user.
 RUN groupadd -g 1024 hermeswebui \
     && useradd -u 1024 -d /home/hermeswebui -g hermeswebui -G users -s /bin/bash -m hermeswebui \
-    && mkdir -p /app /uv_cache \
-    && chown -R hermeswebui:hermeswebui /home/hermeswebui /app /uv_cache
+    && mkdir -p /app /uv_cache /workspace \
+    && chown -R hermeswebui:hermeswebui /home/hermeswebui /app /uv_cache /workspace \
+    && chmod 0755 /home/hermeswebui \
+    && chmod 1777 /app /uv_cache /workspace
 
 COPY --chmod=555 docker_init.bash /hermeswebui_init.bash