Skip to content

fix permissions on build dir#8

Merged
ahze merged 1 commit into
daemonless:mainfrom
jtrotsky:fix/build-plugins-dir-perms
Jul 6, 2026
Merged

fix permissions on build dir#8
ahze merged 1 commit into
daemonless:mainfrom
jtrotsky:fix/build-plugins-dir-perms

Conversation

@jtrotsky

@jtrotsky jtrotsky commented Jul 6, 2026

Copy link
Copy Markdown
Contributor

Problem

After #7 the core-plugin path is correct, but plugins still don't load: Immich runs as bsd (uid 1000) and scans /build/plugins, which is created root-owned, mode 0700. The bsd process gets EACCES and registers zero plugins, so the Workflow builder is empty.

Cause: chown -R bsd:bsd /build runs before mkdir -p /build/plugins, and the only follow-up chown is chown -h on the symlink — never the directory.

Fix

mkdir -p /build/plugins && \
chown bsd:bsd /build/plugins && chmod 755 /build/plugins && \
ln -sf /app/corePlugin /build/plugins/immich-plugin-core && \

Verified

Rebuilt image, as the runtime user:

$ podman run --rm --user 1000:1000 --entrypoint sh <img> \
    -c 'ls -ld /build/plugins; head -c60 /build/plugins/immich-plugin-core/manifest.json'
drwxr-xr-x  bsd bsd  /build/plugins        # was drwx------ root
{ "name": "immich-plugin-core", ...       # was: Permission denied

/build/plugins is now traversable by uid 1000 and the plugin manifest reads. Runtime confirmation (/api/plugins/templates non-empty) pending a live deploy.

@jtrotsky jtrotsky marked this pull request as ready for review July 6, 2026 12:14
@ahze ahze merged commit c614ade into daemonless:main Jul 6, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants