Changing hermes UID to 99
Changing hermes GID to 100
Fixing ownership of /home/hermes/.hermes to hermes (99)
Dropping root privileges
Syncing bundled skills into ~/.hermes/skills/ ...
Done: 0 new, 0 updated, 87 unchanged. 87 total bundled.
Starting hermes dashboard on 0.0.0.0:9119 (background)
[dashboard] Hermes Web UI → http://0.0.0.0:9119
┌─────────────────────────────────────────────────────────┐
│ ⚕ Hermes Gateway Starting... │
├─────────────────────────────────────────────────────────┤
│ Messaging platforms + cron scheduler │
│ Press Ctrl+C to stop │
└─────────────────────────────────────────────────────────┘
WARNING gateway.run: No user allowlists configured. All unauthorized users will be denied. Set GATEWAY_ALLOW_ALL_USERS=true in ~/.hermes/.env to allow open access, or configure platform allowlists (e.g., TELEGRAM_ALLOWED_USERS=your_id).
[dashboard] TUI build failed.
[dashboard] > hermes-tui@0.0.1 build
[dashboard] > npm run build --prefix packages/hermes-ink && tsc -p tsconfig.build.json && npm run build:compile && chmod +x dist/entry.js
[dashboard]
[dashboard]
[dashboard] > @hermes/ink@0.0.1 build
[dashboard] > esbuild src/entry-exports.ts --bundle --platform=node --format=esm --packages=external --outdir=dist
[dashboard]
[dashboard] ✘ [ERROR] Failed to write to output file: open /opt/hermes/ui-tui/packages/hermes-ink/dist/entry-exports.js: permission denied
[dashboard]
[dashboard] 1 error
[dashboard]
[dashboard] dist/entry-exports.js 418.8kb
[dashboard]
[dashboard] ⚡ Done in 23ms
[hermes debug share: log content redacted at upload time. run with --no-redact to disable]
--- hermes dump ---
version: 0.13.0 (2026.5.7) [(unknown)]
os: Linux 6.12.87-Unraid x86_64
python: 3.13.5
openai_sdk: 2.24.0
profile: default
hermes_home: /home/hermes/.hermes
model: openai/gpt-5.4-nano
provider: openrouter
terminal: local
api_keys:
openrouter set
openai not set
anthropic not set
anthropic_token not set
nous not set
google/gemini not set
gemini not set
glm/zai not set
zai not set
kimi not set
minimax not set
deepseek not set
dashscope not set
huggingface not set
nvidia not set
ai_gateway not set
opencode_zen not set
opencode_go not set
kilocode not set
firecrawl not set
tavily not set
browserbase not set
fal not set
elevenlabs not set
github not set
features:
toolsets: hermes-cli
mcp_servers: 0
memory_provider: built-in
gateway: running (docker (foreground), pid 7)
platforms: none
cron_jobs: 0
skills: 87
config_overrides:
agent.max_turns: 60
display.streaming: True
--- end dump ---
--- agent.log (last 200 lines) ---
2026-05-10 15:43:50,710 INFO hermes_cli.plugins: Plugin 'openai' registered image_gen provider: openai
2026-05-10 15:43:50,713 INFO hermes_cli.plugins: Plugin 'openai-codex' registered image_gen provider: openai-codex
2026-05-10 15:43:50,715 INFO hermes_cli.plugins: Plugin 'xai' registered image_gen provider: xai
2026-05-10 15:43:51,406 INFO hermes_cli.plugins: Plugin discovery complete: 12 found, 8 enabled
2026-05-10 15:43:51,455 INFO hermes_cli.web_server: Mounted plugin API routes: /api/plugins/hermes-achievements/
2026-05-10 15:43:51,517 INFO hermes_cli.web_server: Mounted plugin API routes: /api/plugins/kanban/
2026-05-10 15:43:51,518 WARNING hermes_cli.web_server: Binding to 0.0.0.0 with --insecure — the dashboard has no robust authentication. Only use on trusted networks.
2026-05-10 15:44:00,722 INFO tools.tirith_security: tirith not found — downloading latest release for x86_64-unknown-linux-gnu...
2026-05-10 15:44:00,751 INFO gateway.run: Starting Hermes Gateway...
2026-05-10 15:44:00,751 INFO gateway.run: Session storage: /home/hermes/.hermes/sessions
2026-05-10 15:44:00,756 INFO gateway.run: Agent budget: max_iterations=60 (agent.max_turns from config.yaml, or HERMES_MAX_ITERATIONS from .env, or default 90)
2026-05-10 15:44:00,756 INFO gateway.run: Secret redaction: ENABLED (tool output, logs, and chat responses are scrubbed before delivery)
2026-05-10 15:44:00,768 WARNING gateway.run: No user allowlists configured. All unauthorized users will be denied. Set GATEWAY_ALLOW_ALL_USERS=true in ~/.hermes/.env to allow open access, or configure platform allowlists (e.g., TELEGRAM_ALLOWED_USERS=your_id).
2026-05-10 15:44:00,861 INFO gateway.run: Connecting to api_server...
2026-05-10 15:44:00,867 INFO gateway.platforms.api_server: [Api_Server] API server listening on http://0.0.0.0:8642 (model: hermes-agent)
2026-05-10 15:44:00,871 INFO gateway.run: ✓ api_server connected
2026-05-10 15:44:00,874 INFO gateway.run: Gateway running with 1 platform(s)
2026-05-10 15:44:00,880 INFO gateway.run: Channel directory built: 0 target(s)
2026-05-10 15:44:01,242 INFO tools.tirith_security: cosign not on PATH — installing tirith with SHA-256 verification only (install cosign for full supply chain verification)
2026-05-10 15:44:01,464 INFO tools.tirith_security: tirith installed to /home/hermes/.hermes/bin/tirith (SHA-256 only)
2026-05-10 15:44:01,883 INFO gateway.run: Press Ctrl+C to stop
2026-05-10 15:44:01,889 INFO gateway.run: Cron ticker started (interval=60s)
2026-05-10 15:44:05,339 INFO hermes_cli.plugins: Plugin 'openai' registered image_gen provider: openai
2026-05-10 15:44:05,342 INFO hermes_cli.plugins: Plugin 'openai-codex' registered image_gen provider: openai-codex
2026-05-10 15:44:05,344 INFO hermes_cli.plugins: Plugin 'xai' registered image_gen provider: xai
2026-05-10 15:44:05,915 INFO hermes_cli.plugins: Plugin discovery complete: 12 found, 8 enabled
2026-05-10 15:44:06,695 INFO run_agent: Loaded environment variables from /home/hermes/.hermes/.env
2026-05-10 15:44:06,922 INFO gateway.run: kanban dispatcher: embedded in gateway (interval=60.0s)
2026-05-10 15:45:05,135 INFO run_agent: OpenAI client created (agent_init, shared=True) thread=Thread-5 (_build):23211048224448 provider=openrouter base_url=https://openrouter.ai/api/v1 model=openai/gpt-5.4-nano
2026-05-10 15:45:05,684 INFO agent.auxiliary_client: Vision auto-detect: using main provider openrouter (openai/gpt-5.4-nano)
2026-05-10 15:45:05,729 INFO agent.auxiliary_client: Auxiliary auto-detect: using main provider openrouter (openai/gpt-5.4-nano)
2026-05-10 15:45:07,694 INFO run_agent: Loaded environment variables from /home/hermes/.hermes/.env
2026-05-10 15:45:08,385 INFO hermes_cli.plugins: Plugin 'openai' registered image_gen provider: openai
2026-05-10 15:45:08,387 INFO hermes_cli.plugins: Plugin 'openai-codex' registered image_gen provider: openai-codex
2026-05-10 15:45:08,389 INFO hermes_cli.plugins: Plugin 'xai' registered image_gen provider: xai
2026-05-10 15:45:08,767 INFO hermes_cli.plugins: Plugin discovery complete: 12 found, 8 enabled
2026-05-10 15:45:36,194 INFO run_agent: OpenAI client created (agent_init, shared=True) thread=Thread-9 (_build):23211016181440 provider=openrouter base_url=https://openrouter.ai/api/v1 model=openai/gpt-5.4-nano
2026-05-10 15:45:36,215 INFO agent.auxiliary_client: Auxiliary auto-detect: using main provider openrouter (openai/gpt-5.4-nano)
2026-05-10 15:45:38,156 INFO run_agent: Loaded environment variables from /home/hermes/.hermes/.env
2026-05-10 15:45:38,856 INFO hermes_cli.plugins: Plugin 'openai' registered image_gen provider: openai
2026-05-10 15:45:38,859 INFO hermes_cli.plugins: Plugin 'openai-codex' registered image_gen provider: openai-codex
2026-05-10 15:45:38,860 INFO hermes_cli.plugins: Plugin 'xai' registered image_gen provider: xai
2026-05-10 15:45:39,212 INFO hermes_cli.plugins: Plugin discovery complete: 12 found, 8 enabled
2026-05-10 16:00:04,181 INFO hermes_cli.plugins: Plugin 'openai' registered image_gen provider: openai
2026-05-10 16:00:04,183 INFO hermes_cli.plugins: Plugin 'openai-codex' registered image_gen provider: openai-codex
2026-05-10 16:00:04,185 INFO hermes_cli.plugins: Plugin 'xai' registered image_gen provider: xai
2026-05-10 16:00:04,894 INFO hermes_cli.plugins: Plugin discovery complete: 12 found, 8 enabled
2026-05-10 16:00:04,931 INFO hermes_cli.web_server: Mounted plugin API routes: /api/plugins/hermes-achievements/
2026-05-10 16:00:04,987 INFO hermes_cli.web_server: Mounted plugin API routes: /api/plugins/kanban/
2026-05-10 16:00:04,988 WARNING hermes_cli.web_server: Binding to 0.0.0.0 with --insecure — the dashboard has no robust authentication. Only use on trusted networks.
2026-05-10 16:00:07,238 INFO gateway.run: Starting Hermes Gateway...
2026-05-10 16:00:07,238 INFO gateway.run: Session storage: /home/hermes/.hermes/sessions
2026-05-10 16:00:07,243 INFO gateway.run: Agent budget: max_iterations=60 (agent.max_turns from config.yaml, or HERMES_MAX_ITERATIONS from .env, or default 90)
2026-05-10 16:00:07,243 INFO gateway.run: Secret redaction: ENABLED (tool output, logs, and chat responses are scrubbed before delivery)
2026-05-10 16:00:07,254 WARNING gateway.run: No user allowlists configured. All unauthorized users will be denied. Set GATEWAY_ALLOW_ALL_USERS=true in ~/.hermes/.env to allow open access, or configure platform allowlists (e.g., TELEGRAM_ALLOWED_USERS=your_id).
2026-05-10 16:00:07,345 INFO gateway.run: Connecting to api_server...
2026-05-10 16:00:07,353 INFO gateway.platforms.api_server: [Api_Server] API server listening on http://0.0.0.0:8642 (model: hermes-agent)
2026-05-10 16:00:07,358 INFO gateway.run: ✓ api_server connected
2026-05-10 16:00:07,360 INFO gateway.run: Gateway running with 1 platform(s)
2026-05-10 16:00:07,367 INFO gateway.run: Channel directory built: 0 target(s)
2026-05-10 16:00:08,096 INFO hermes_cli.plugins: Plugin 'openai' registered image_gen provider: openai
2026-05-10 16:00:08,098 INFO hermes_cli.plugins: Plugin 'openai-codex' registered image_gen provider: openai-codex
2026-05-10 16:00:08,100 INFO hermes_cli.plugins: Plugin 'xai' registered image_gen provider: xai
2026-05-10 16:00:08,369 INFO gateway.run: Press Ctrl+C to stop
2026-05-10 16:00:08,376 INFO gateway.run: Cron ticker started (interval=60s)
2026-05-10 16:00:08,667 INFO hermes_cli.plugins: Plugin discovery complete: 12 found, 8 enabled
2026-05-10 16:00:13,401 INFO gateway.run: kanban dispatcher: embedded in gateway (interval=60.0s)
2026-05-10 16:00:15,793 INFO run_agent: Loaded environment variables from /home/hermes/.hermes/.env
2026-05-10 16:00:17,399 INFO run_agent: OpenAI client created (agent_init, shared=True) thread=Thread-3 (_build):23350332069568 provider=openrouter base_url=https://openrouter.ai/api/v1 model=openai/gpt-5.4-nano
2026-05-10 16:00:17,834 INFO agent.auxiliary_client: Vision auto-detect: using main provider openrouter (openai/gpt-5.4-nano)
2026-05-10 16:00:17,902 INFO agent.auxiliary_client: Auxiliary auto-detect: using main provider openrouter (openai/gpt-5.4-nano)
2026-05-10 16:00:19,875 INFO run_agent: Loaded environment variables from /home/hermes/.hermes/.env
2026-05-10 16:00:20,705 INFO hermes_cli.plugins: Plugin 'openai' registered image_gen provider: openai
2026-05-10 16:00:20,707 INFO hermes_cli.plugins: Plugin 'openai-codex' registered image_gen provider: openai-codex
2026-05-10 16:00:20,708 INFO hermes_cli.plugins: Plugin 'xai' registered image_gen provider: xai
2026-05-10 16:00:21,088 INFO hermes_cli.plugins: Plugin discovery complete: 12 found, 8 enabled
--- errors.log (last 100 lines) ---
2026-05-10 15:43:51,518 WARNING hermes_cli.web_server: Binding to 0.0.0.0 with --insecure — the dashboard has no robust authentication. Only use on trusted networks.
2026-05-10 15:44:00,768 WARNING gateway.run: No user allowlists configured. All unauthorized users will be denied. Set GATEWAY_ALLOW_ALL_USERS=true in ~/.hermes/.env to allow open access, or configure platform allowlists (e.g., TELEGRAM_ALLOWED_USERS=your_id).
2026-05-10 16:00:04,988 WARNING hermes_cli.web_server: Binding to 0.0.0.0 with --insecure — the dashboard has no robust authentication. Only use on trusted networks.
2026-05-10 16:00:07,254 WARNING gateway.run: No user allowlists configured. All unauthorized users will be denied. Set GATEWAY_ALLOW_ALL_USERS=true in ~/.hermes/.env to allow open access, or configure platform allowlists (e.g., TELEGRAM_ALLOWED_USERS=your_id).
--- gateway.log (last 100 lines) ---
2026-05-10 15:44:00,751 INFO gateway.run: Starting Hermes Gateway...
2026-05-10 15:44:00,751 INFO gateway.run: Session storage: /home/hermes/.hermes/sessions
2026-05-10 15:44:00,756 INFO gateway.run: Agent budget: max_iterations=60 (agent.max_turns from config.yaml, or HERMES_MAX_ITERATIONS from .env, or default 90)
2026-05-10 15:44:00,756 INFO gateway.run: Secret redaction: ENABLED (tool output, logs, and chat responses are scrubbed before delivery)
2026-05-10 15:44:00,768 WARNING gateway.run: No user allowlists configured. All unauthorized users will be denied. Set GATEWAY_ALLOW_ALL_USERS=true in ~/.hermes/.env to allow open access, or configure platform allowlists (e.g., TELEGRAM_ALLOWED_USERS=your_id).
2026-05-10 15:44:00,861 INFO gateway.run: Connecting to api_server...
2026-05-10 15:44:00,867 INFO gateway.platforms.api_server: [Api_Server] API server listening on http://0.0.0.0:8642 (model: hermes-agent)
2026-05-10 15:44:00,871 INFO gateway.run: ✓ api_server connected
2026-05-10 15:44:00,874 INFO gateway.run: Gateway running with 1 platform(s)
2026-05-10 15:44:00,880 INFO gateway.run: Channel directory built: 0 target(s)
2026-05-10 15:44:01,883 INFO gateway.run: Press Ctrl+C to stop
2026-05-10 15:44:01,889 INFO gateway.run: Cron ticker started (interval=60s)
2026-05-10 15:44:06,922 INFO gateway.run: kanban dispatcher: embedded in gateway (interval=60.0s)
2026-05-10 16:00:07,238 INFO gateway.run: Starting Hermes Gateway...
2026-05-10 16:00:07,238 INFO gateway.run: Session storage: /home/hermes/.hermes/sessions
2026-05-10 16:00:07,243 INFO gateway.run: Agent budget: max_iterations=60 (agent.max_turns from config.yaml, or HERMES_MAX_ITERATIONS from .env, or default 90)
2026-05-10 16:00:07,243 INFO gateway.run: Secret redaction: ENABLED (tool output, logs, and chat responses are scrubbed before delivery)
2026-05-10 16:00:07,254 WARNING gateway.run: No user allowlists configured. All unauthorized users will be denied. Set GATEWAY_ALLOW_ALL_USERS=true in ~/.hermes/.env to allow open access, or configure platform allowlists (e.g., TELEGRAM_ALLOWED_USERS=your_id).
2026-05-10 16:00:07,345 INFO gateway.run: Connecting to api_server...
2026-05-10 16:00:07,353 INFO gateway.platforms.api_server: [Api_Server] API server listening on http://0.0.0.0:8642 (model: hermes-agent)
2026-05-10 16:00:07,358 INFO gateway.run: ✓ api_server connected
2026-05-10 16:00:07,360 INFO gateway.run: Gateway running with 1 platform(s)
2026-05-10 16:00:07,367 INFO gateway.run: Channel directory built: 0 target(s)
2026-05-10 16:00:08,369 INFO gateway.run: Press Ctrl+C to stop
2026-05-10 16:00:08,376 INFO gateway.run: Cron ticker started (interval=60s)
2026-05-10 16:00:13,401 INFO gateway.run: kanban dispatcher: embedded in gateway (interval=60.0s)
Bug Description
Attempting to update my Unraid Template (https://github.com/mmartial/unraid-templates/blob/main/templates/hermes-agent.xml) to reflect new guidelines from https://hermes-agent.nousresearch.com/docs/user-guide/docker
I tried to use the
Chatfeature within a newly started container and encounter permission denied errors.The container is started using
HERMES_UIDandHERMES_GID, with a Docker shared volume at/opt/hermesto interface with the Hermes WebUI.Steps to Reproduce
Chatinterface in theDashboardChatdocker logs HermesAgentI also note that the files in
/opt/hermesare not owned by99:100as expected:Expected Behavior
Ability to use
ChatActual Behavior
Chat Unavailableerror in WebUI andTUI build failedand[ERROR] Failed to write to output file: open /opt/hermes/ui-tui/packages/hermes-ink/dist/entry-exports.js: permission deniedAffected Component
Setup / Installation
Messaging Platform (if gateway-related)
N/A (CLI only)
Debug Report
Operating System
Unraid (Slackware host)
Python Version
3.13.5 (from container)
Hermes Version
0.13.0 (2026.5.7)
Additional Logs / Traceback (optional)
Root Cause Analysis (optional)
No response
Proposed Fix (optional)
No response
Are you willing to submit a PR for this?