github xpsony/UmlautAdaptarrEX 1.2.3

latest releases: 1.5.0, 1.4.0, 1.3.0...
4 months ago

1.2.3 — 2026-06-06

Lets the container run fully unprivileged and ships as a TrueNAS Community app. Until now the image required root at startup; root is now used only for the one-time /data ownership fix and the application process never runs as root. No schema changes.

Features

Improvements

  • Unprivileged container startup: The image can now be started directly as a non-root user (docker run --user, a compose user: entry, Kubernetes runAsUser, or the TrueNAS app's run_as field). In that case the entrypoint skips the chown/gosu step and runs directly under the given UID/GID, so the container no longer needs the CHOWN/SETUID/SETGID capabilities or root, provided the /data volume is already owned by that UID/GID.

Security & maintenance

  • root only for ownership setup: When the container does start as root (the default), root is used only for the one-time chown of /data; the entrypoint then drops to PUID:PGID via gosu before launching the app, so the application process (node start.mjs) never runs as root. The startup path is fully backward-compatible with the existing root-by-default compose setup.

Upgrade notes

No action needed for the default Docker / compose setup. To run unprivileged, pre-own the /data volume with your target UID/GID and start the container with that user (e.g. --user 1000:1000); PUID/PGID are ignored in that mode since the orchestrator already sets the UID/GID.

Don't miss a new UmlautAdaptarrEX release

NewReleases is sending notifications on new releases.