# NousResearch/hermes-agent · Docker stage2 config migration user context fix

## Open now

- 1 issue, 2 PRs open on GitHub.
- #118265: \[Bug\]: non-root start silently skips the boot-time config migration (stage2 calls s6-setuidgid directly)
- PR #118266: fix(docker): use as_hermes for config migration and nous reseed in stage2
- PR #134094: Docker: non-root start no longer skips config migration, Nous reseed and dependency refresh (fixes #118265, salvage #118266)

These issues and PRs address a bug where boot-time config migration and Nous reseed in the Docker stage2 startup were not running under the correct user context, causing silent skips for non-root container starts. The proposed fix routes these operations through \`as_hermes\` to ensure proper privilege handling.

## TL;DR

- 4 member(s): 1 open issue(s), 0 closed issue(s), 2 open PR(s), 0 merged PR(s), 1 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.50`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #118265: \[Bug\]: non-root start silently skips the boot-time config migration (stage2 calls s6-setuidgid directly)

## Prior & competing PRs

- **#118266: fix(docker): use as_hermes for config migration and nous reseed in stage2**. open
  - maintainer direction: category `uncategorized`; implication `needs_llm`; refs `#134094`, `#134094`
  - files: `docker/stage2-hook.sh`, `tests/tools/test_stage2_hook_nonroot_privilege_drop.py`
- **#118309: fix(docker): route stage2 config migration and Nous reseed through as_hermes**. closed without merge
  - maintainer direction: category `uncategorized`; implication `needs_llm`; refs `#118266`, `#134094`
- **#134094: Docker: non-root start no longer skips config migration, Nous reseed and dependency refresh (fixes #118265, salvage #118266)**. open
  - maintainer direction: category `uncategorized`; implication `needs_llm`; refs `5ad1f8bba7bc9d7a0d8608d17d4cd8fd833a20c7`, `5b165e9bfceeeac19a595242fff50c810a3bd610`
  - files: `docker/stage2-hook.sh`, `tests/tools/test_stage2_hook_nonroot_privilege_drop.py`, `website/docs/user-guide/docker.md`

## Fix status

- No merged fix on record.
- Subsystem: `environments`