From 5153aeebec30152f72fe7dae757a51b15ec171ab Mon Sep 17 00:00:00 2001 From: dtoro Date: Sun, 17 May 2026 18:23:37 +0200 Subject: [PATCH] fix(sidecar): podman keep-id mapping so mutations land as the host user MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Without keep-id the container's UID:GID maps into the rootless podman subuid range (524288+), so the sidecar couldn't create `/photoprism/originals/.duplicates/` — the archive endpoint failed with "mkdir: permission denied", and rename / folder ops would have hit the same wall. The PhotoPrism container already has this override for the same reason; mirror it for the sidecar. Co-Authored-By: Claude Opus 4.7 (1M context) --- docker-compose.photoprism.podman.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docker-compose.photoprism.podman.yml b/docker-compose.photoprism.podman.yml index 8d7e5ea..26557f4 100644 --- a/docker-compose.photoprism.podman.yml +++ b/docker-compose.photoprism.podman.yml @@ -26,3 +26,9 @@ services: # host UID that owns the bind-mounted originals/. photoprism: userns_mode: keep-id + + # Sidecar mutates the originals tree (rename / folder ops / heap + # convert / .duplicates archive) — same keep-id mapping so its writes + # land as the host user, not as a podman-subuid the host doesn't own. + sidecar: + userns_mode: keep-id