fix: update compose submodule pin to include USER hermes fix #77

Hermes · 2026-07-07T19:25:46Z

Hermes commented

2026-07-07 19:25:46 +00:00

Updates the assets/compose submodule to commit 54e0661 which adds USER hermes at the end of the Hermes Dockerfile.

This ensures the container runs as uid 10000 instead of root, fixing the privilege leak where background subprocesses escaped the gosu drop and created root-owned files in ExoKortex.

Updates the `assets/compose` submodule to commit 54e0661 which adds `USER hermes` at the end of the Hermes Dockerfile. This ensures the container runs as uid 10000 instead of root, fixing the privilege leak where background subprocesses escaped the gosu drop and created root-owned files in ExoKortex.

Hermes added 9 commits 2026-07-07 19:25:49 +00:00

Added paperclip and honcho secrets e3f7d18d8e

Added tmux, removed opencode, openclaw node ab7da92626

Split container secret in preparation to switching seperated env 78ab440727

Updated the compose pin 1c806e6390

Deleted wrongly created file... 2b1df578ac

Added opencode api key 65587809aa

update lock 2e236581f0

More local changes, mostly compose update and nixmate df91a909b6

fix: update compose submodule to include USER hermes fix 2338eaf74c

The compose submodule now points to commit 54e0661 which adds the missing
USER hermes at the end of the Hermes Dockerfile. This ensures all container
processes run as uid 10000 instead of root, fixing the privilege leak where
background subprocesses escaped the gosu drop and created root-owned files
in ExoKortex that broke Syncthing sync.

gortium merged commit 60a90d5f98 into master

2026-07-07 19:42:02 +00:00

gortium referenced this issue from a commit

2026-07-07 19:42:06 +00:00

Merge pull request 'fix: update compose submodule pin to include USER hermes fix' (#77) from local_changes into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: gortium/infra#77