fix: move run-multi-gateways.sh into ai/hermes/ and bake into image

Merge remote-tracking branch 'origin/fix/hermes-build'
fix: also clear API_SERVER_KEY for profile gateways
2026-05-22 21:37:01 -04:00 · 2026-05-22 21:13:46 -04:00 · 2026-05-22 13:53:53 -04:00 · 2026-05-22 13:52:05 -04:00 · 2026-05-22 13:34:12 -04:00 · 2026-05-22 13:26:59 -04:00
3 changed files with 39 additions and 1 deletions
--- a/ai/compose.yml
+++ b/ai/compose.yml
@@ -32,9 +32,11 @@ services:
        - default
    container_name: hermes
    entrypoint: ["/bin/bash", "-c",
-      "bash /opt/data/hermes-tools/install.sh && bash /opt/data/hermes-tools/run-multi-gateways.sh && exec /usr/bin/tini -g -- /opt/hermes/docker/entrypoint.sh \"$@\"",
+      "bash /opt/data/hermes-tools/install.sh && bash /usr/local/bin/run-multi-gateways.sh && exec /usr/bin/tini -g -- /opt/hermes/docker/entrypoint.sh \"$@\"",
      "hermes-entrypoint"]
    restart: always
+    # Gateway run enables the internal API server on port 8642
+    command: gateway run
    environment:
      - OLLAMA_HOST=http://ollama:11434
      - HERMES_DASHBOARD=1
--- a/ai/hermes/Dockerfile
+++ b/ai/hermes/Dockerfile
@@ -76,6 +76,10 @@ os.remove(tgz)
 print('himalaya v1.2.0 installed')
 PYEOF

+# ---------- Install multi-gateway launcher ----------
+# Launches one gateway process per profile (HERMES_PROFILES env var)
+COPY --chmod=0755 run-multi-gateways.sh /usr/local/bin/run-multi-gateways.sh
+
 # ---------- Runtime ----------
 USER hermes
 ENV HERMES_HOME=/opt/data
--- a/ai/hermes/run-multi-gateways.sh
+++ b/ai/hermes/run-multi-gateways.sh
@@ -0,0 +1,32 @@
+#!/bin/bash
+# Multi-gateway launcher for HERMES_PROFILES env var.
+# Reads comma-separated profile names, spawns one gateway per profile.
+# Designed to run before the main entrypoint — gateways run in background.
+set -e
+
+if [ -z "${HERMES_PROFILES}" ]; then
+  echo "HERMES_PROFILES not set — skipping multi-gateway launch"
+  exit 0
+fi
+
+# Source venv to make 'hermes' available (entrypoint.sh sources it later,
+# but we need it NOW for the background gateways)
+HERMES_BIN="/opt/hermes/.venv/bin/hermes"
+if [ ! -x "$HERMES_BIN" ]; then
+  echo "ERROR: hermes binary not found at $HERMES_BIN"
+  exit 1
+fi
+
+mkdir -p /opt/data/logs
+
+IFS=',' read -ra PROFILES <<< "${HERMES_PROFILES}"
+for profile in "${PROFILES[@]}"; do
+  profile="$(echo "${profile}" | xargs)"  # trim whitespace
+  [ -z "${profile}" ] && continue
+
+  echo "Starting gateway for profile: ${profile}"
+  nohup env API_SERVER_ENABLED=false API_SERVER_KEY= gosu hermes "$HERMES_BIN" --profile "${profile}" gateway run \
+      >> "/opt/data/logs/gateway-${profile}.log" 2>&1 &
+done
+
+echo "All gateways launched: ${HERMES_PROFILES}"
Author	SHA1	Message	Date
Hermes	c1cd9d31e9	fix: move run-multi-gateways.sh into ai/hermes/ and bake into image Some checks failed Build Hermes agent / build (pull_request) Has been cancelled Details Build ollama (gfx906) / build (pull_request) Has been cancelled Details	2026-05-22 21:37:01 -04:00
Thierry Pouplier	5765dc6004	Merge remote-tracking branch 'origin/fix/hermes-build'	2026-05-22 21:13:46 -04:00
Hermes	e8075fb71b	fix: also clear API_SERVER_KEY for profile gateways Line 1521 in gateway/config.py: if api_server_enabled or api_server_key: The compose.yml sets API_SERVER_KEY=hermes_local_key, which was enough to enable the API server even with API_SERVER_ENABLED=false.	2026-05-22 13:53:53 -04:00
Hermes	645d519030	fix: use env to force API_SERVER_ENABLED=false in multi-gateway launcher Shell prefix didn't work with nohup+gosu chain - Docker compose env var API_SERVER_ENABLED=true leaked through. Using 'env' command guarantees the override is in the child process env.	2026-05-22 13:52:05 -04:00
Hermes	146add2a64	fix: use full hermes path and gosu in multi-gateway launcher - Use /opt/hermes/.venv/bin/hermes (full path) — not on PATH before entrypoint.sh sources the venv - Wrap with gosu hermes to avoid root guard in gateway run - Add error check if hermes binary doesn't exist	2026-05-22 13:34:12 -04:00
Thierry Pouplier	eb3795d9e3	Merge remote-tracking branch 'origin/fix/hermes-build'	2026-05-22 13:26:59 -04:00
Thierry Pouplier	ef6e0e57b6	Merge remote-tracking branch 'origin/fix/remove-venv-mount'	2026-05-22 13:25:59 -04:00
Hermes	d8a1ebcd96	fix: add missing command: gateway run to hermes service Without this, is empty and entrypoint.sh runs bare 'hermes' which defaults to interactive chat mode. With a non-TTY stdin this exits immediately with prompt_toolkit's 'Input is not a terminal' warning, causing a container restart loop. The profile gateways (run-multi-gateways.sh) were unaffected because the script passes 'gateway run' explicitly.	2026-05-22 13:23:08 -04:00
Hermes	45a224eb7f	fix: add missing command: gateway run to hermes service Without this, is empty and entrypoint.sh runs bare 'hermes' which defaults to interactive chat mode. With a non-TTY stdin this exits immediately with prompt_toolkit's 'Input is not a terminal' warning, causing a container restart loop. The profile gateways (run-multi-gateways.sh) were unaffected because the script passes 'gateway run' explicitly.	2026-05-22 13:22:58 -04:00
Hermes	bce336c4fd	feat: bake Matrix bridge deps into Docker image instead of volume mount - Add libolm-dev system dep (required by mautrix[encryption]) - Add mautrix[encryption] + openai pip packages to build - These were previously installed inline at container startup and persisted via the fragile venv volume mount (now removed)	2026-05-22 13:04:43 -04:00
Hermes	e4117cd3d5	fix: remove venv volume mount conflicting with entrypoint.sh The volume mount at /mnt/HoardingCow_docker_data/Hermes/venv overrides the container's built .venv with an empty or stale host directory, causing entrypoint.sh line 62 to fail on 'source .venv/bin/activate' (set -e). The Docker image already builds a complete venv — no need to persist it.	2026-05-22 13:04:08 -04:00