From 4b37990554f13e2bbb1455e7dfc307b8922b7837 Mon Sep 17 00:00:00 2001
From: Ojus Save <ojusave@users.noreply.github.com>
Date: Mon, 26 Jan 2026 10:40:38 -0800
Subject: [PATCH] fix(render): handle permission errors when running as
 non-root user

- Check if CLAWDBOT_STATE_DIR or /data/.clawdbot is writable
- Fall back to $HOME/.clawdbot if permissions fail
- Update CLAWDBOT_STATE_DIR export to match actual directory used
- Prevents Docker failures when running as node user (non-root)
---
 scripts/render-start.sh | 33 +++++++++++++++++++++++++++------
 1 file changed, 27 insertions(+), 6 deletions(-)

diff --git a/scripts/render-start.sh b/scripts/render-start.sh
index 69f094777..a5e55553e 100755
--- a/scripts/render-start.sh
+++ b/scripts/render-start.sh
@@ -1,12 +1,31 @@
 #!/bin/sh
 # Render startup script - creates config and starts gateway
+# Note: We use set -e but handle permission errors gracefully
 set -e
 
 echo "=== Render startup script ==="
 echo "CLAWDBOT_STATE_DIR=${CLAWDBOT_STATE_DIR}"
 echo "HOME=${HOME}"
 
-CONFIG_DIR="${CLAWDBOT_STATE_DIR:-/data/.clawdbot}"
+# Determine config directory
+# Prefer CLAWDBOT_STATE_DIR if set and writable, otherwise use $HOME/.clawdbot
+if [ -n "${CLAWDBOT_STATE_DIR}" ]; then
+  # Try to use the explicitly set directory
+  if mkdir -p "${CLAWDBOT_STATE_DIR}" 2>/dev/null && [ -w "${CLAWDBOT_STATE_DIR}" ]; then
+    CONFIG_DIR="${CLAWDBOT_STATE_DIR}"
+  else
+    echo "Warning: ${CLAWDBOT_STATE_DIR} is not writable, using ${HOME}/.clawdbot instead"
+    CONFIG_DIR="${HOME}/.clawdbot"
+  fi
+else
+  # Default: try /data/.clawdbot, fall back to $HOME/.clawdbot
+  if mkdir -p "/data/.clawdbot" 2>/dev/null && [ -w "/data/.clawdbot" ]; then
+    CONFIG_DIR="/data/.clawdbot"
+  else
+    CONFIG_DIR="${HOME}/.clawdbot"
+  fi
+fi
+
 CONFIG_FILE="${CONFIG_DIR}/clawdbot.json"
 HOME_CONFIG_DIR="${HOME}/.clawdbot"
 HOME_CONFIG_FILE="${HOME_CONFIG_DIR}/clawdbot.json"
@@ -16,9 +35,8 @@ echo "Config file: ${CONFIG_FILE}"
 echo "Home config dir: ${HOME_CONFIG_DIR}"
 echo "Home config file: ${HOME_CONFIG_FILE}"
 
-# Create config directories
+# Create config directory (should succeed now)
 mkdir -p "${CONFIG_DIR}"
-mkdir -p "${HOME_CONFIG_DIR}"
 
 # Config content
 CONFIG_CONTENT='{
@@ -31,9 +49,8 @@ CONFIG_CONTENT='{
   }
 }'
 
-# Write to both locations
+# Write config file
 echo "${CONFIG_CONTENT}" > "${CONFIG_FILE}"
-echo "${CONFIG_CONTENT}" > "${HOME_CONFIG_FILE}"
 
 echo "=== Config written to BOTH locations ==="
 echo "=== ${CONFIG_FILE}: ==="
@@ -50,10 +67,14 @@ ls -la "${HOME_CONFIG_DIR}/"
 
 # Start the gateway with token from env var
 # Explicitly set CLAWDBOT_CONFIG_PATH to ensure config is loaded from the file we wrote
+# Also update CLAWDBOT_STATE_DIR to match the directory we're actually using
 # Disable config cache to ensure fresh reads
-echo "=== Starting gateway with CLAWDBOT_STATE_DIR=${CLAWDBOT_STATE_DIR} ==="
+echo "=== Starting gateway ==="
+echo "=== Using config dir: ${CONFIG_DIR} ==="
+echo "=== Setting CLAWDBOT_STATE_DIR=${CONFIG_DIR} ==="
 echo "=== Setting CLAWDBOT_CONFIG_PATH=${CONFIG_FILE} ==="
 echo "=== Disabling config cache ==="
+export CLAWDBOT_STATE_DIR="${CONFIG_DIR}"
 export CLAWDBOT_CONFIG_PATH="${CONFIG_FILE}"
 export CLAWDBOT_CONFIG_CACHE_MS=0