From b05f9fad09ed86ae47590a27f2aa773bfb09532a Mon Sep 17 00:00:00 2001
From: Hermes Agent service account
 <hermes@carousel-of-progress.local.mk-labs.cloud>
Date: Wed, 27 May 2026 21:17:40 -0500
Subject: [PATCH] fix(semaphore): add :U volume flag for proper rootless UID
 mapping

Prevents permission issues with BoltDB data directory in rootless Podman
---
 ansible/roles/semaphore/templates/semaphore.container.j2 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ansible/roles/semaphore/templates/semaphore.container.j2 b/ansible/roles/semaphore/templates/semaphore.container.j2
index 8aef162..78ad3a6 100644
--- a/ansible/roles/semaphore/templates/semaphore.container.j2
+++ b/ansible/roles/semaphore/templates/semaphore.container.j2
@@ -7,8 +7,8 @@ Wants=network-online.target
 Image={{ semaphore_image }}
 ContainerName={{ semaphore_container_name }}
 PublishPort={{ semaphore_port }}:3000
-Volume={{ semaphore_data_dir }}:/var/lib/semaphore:Z
-Volume={{ semaphore_config_dir }}:/etc/semaphore:Z
+Volume={{ semaphore_data_dir }}:/var/lib/semaphore:Z,U
+Volume={{ semaphore_config_dir }}:/etc/semaphore:Z,U
 Environment=SEMAPHORE_DB_DIALECT={{ semaphore_db_type }}
 Environment=SEMAPHORE_DB_PATH={{ semaphore_db_path }}
 Environment=SEMAPHORE_ADMIN=admin