From 0127016ab28fb3a7dff77bd29914efe71dd82cef Mon Sep 17 00:00:00 2001
From: Hermes Agent service account
 <hermes@carousel-of-progress.local.mk-labs.cloud>
Date: Tue, 26 May 2026 22:57:10 -0500
Subject: [PATCH] fix: run Semaphore container as root inside container

---
 ansible/roles/semaphore/tasks/main.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ansible/roles/semaphore/tasks/main.yml b/ansible/roles/semaphore/tasks/main.yml
index 588c6b5..08e242e 100644
--- a/ansible/roles/semaphore/tasks/main.yml
+++ b/ansible/roles/semaphore/tasks/main.yml
@@ -41,7 +41,8 @@
       SEMAPHORE_ADMIN: admin
       SEMAPHORE_ADMIN_PASSWORD: "{{ vault_semaphore_admin_password }}"
       SEMAPHORE_ACCESS_KEY_ENCRYPTION: "{{ vault_semaphore_access_key_encryption }}"
-    user: "{{ semaphore_user }}"
+    # Run as root inside the container (common for Semaphore)
+    # The container itself runs rootless via the host 'cast' user context
 
 - name: Generate systemd service for the container
   ansible.builtin.command: