From 8dfdcb80e8ce9cc8928a3ffc2892ead72c52ad46 Mon Sep 17 00:00:00 2001
From: William Turner <w_turner@orange.fr>
Date: Sun, 23 Aug 2026 11:25:28 +0000
Subject: [PATCH] =?UTF-8?q?Run=20claude-agent=20as=20non-root=20user=20?=
 =?UTF-8?q?=E2=80=94=20Claude=20Code=20refuses=20bypassPermissions=20as=20?=
 =?UTF-8?q?root?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 agent/Dockerfile | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/agent/Dockerfile b/agent/Dockerfile
index 70e05a0..93e32a4 100644
--- a/agent/Dockerfile
+++ b/agent/Dockerfile
@@ -8,11 +8,17 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     && rm -rf /var/lib/apt/lists/*
 
 RUN npm install -g @anthropic-ai/claude-code
+RUN useradd --create-home --shell /bin/bash agent && mkdir -p /workspace
 
 WORKDIR /app
 COPY package*.json ./
 RUN npm install --omit=dev
 COPY src ./src
+RUN chown -R agent:agent /app /workspace
+
+# Claude Code refuses to run with bypassPermissions as root — headless/unattended
+# operation needs a non-root user.
+USER agent
 
 RUN git config --global user.email "claude-agent@apps.williamturner.eu" \
     && git config --global user.name "claude-agent" \