[BUG] wrong static path

[rshb-sysa]

An error occurs when trying to upload an icon for a custom asset.
in previous versions, static files in the container were copied to the /iriswebapp/app/static folder
Now they are copied to /iriswebapp/static (docker/webApp/Dockerfile:80)

[coderabbitai]

📝 CodeRabbit Plan Mode

Generate an implementation plan and prompts that you can use with your favorite coding agent.

• Create Plan

Examples

• Example 1
• Example 2

---

🔗 Similar Issues

Possible Duplicates

• [BUG] webApp Dockerfile misplaces static content #820

Related Issues

• [BUG] Error uploading assets via csv #787

👤 Suggested Assignees

• 59e5aaf4
• infosec-shinobi

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord or schedule a call!

[I3urny]

I just uploaded a custom icon for an asset via the UI in IRIS v2.4.26, and it works without any issues.
Could you clarify what exactly you're trying to do and share your error message or a screenshot of the error?

[rshb-sysa]

Hello!
Yes, I forgot to specify the version. I am talking about 2.5.0-beta.1
I have checked issue on the demo stand https://v200.beta.dfir-iris.org

[I3urny]

Do you mean this error in the demo when adding a custom icon for an asset via the UI?

Error
0 - Unable to add icon [Errno 2] No such file or directory: '/home/iris/server_data/custom_assets/ibbbflajuaecznvhtm' -> '/iriswebapp/app/static/assets/img/graph/ibbbflajuaecznvhtm'

[rshb-sysa]

Yes

[I3urny]

I think you're correct about this:

in previous versions, static files in the container were copied to the /iriswebapp/app/static folder
Now they are copied to /iriswebapp/static (docker/webApp/Dockerfile:80)

To make that clearer, in v2.4.20 the static assets are part of the repository under the source/app/static/ folder and is thus copied to iriswebapp/app/static/ in the container:

iris-web/docker/webApp/Dockerfile

Lines 61 to 69 in 56ef91b

	WORKDIR /iriswebapp
	COPY docker/webApp/iris-entrypoint.sh .
	COPY docker/webApp/wait-for-iriswebapp.sh .
	COPY ./source .
	# Add execution right to binaries needed by evtx2splunk for iris_evtx module
	RUN chmod +x /iriswebapp/dependencies/evtxdump_binaries/linux/x64/fd
	RUN chmod +x /iriswebapp/dependencies/evtxdump_binaries/linux/x64/evtx_dump

In v2.5.0-beta.1 most static assets are part of the repository under the ui/ folder and are copied to /iriswebapp/static/ in the container. The exception being the assets under source/app/static/assets/css/img/network/ which are still copied to /iriswebapp/app/static/ due to L78, which probably is a bug on its own.

iris-web/docker/webApp/Dockerfile

Lines 74 to 84 in 9441d4d

	WORKDIR /iriswebapp
	COPY docker/webApp/iris-entrypoint.sh .
	COPY docker/webApp/wait-for-iriswebapp.sh .
	COPY ./source .
	COPY --from=compile-js-image /ui/dist/ /iriswebapp/static/
	# Add execution right to binaries needed by evtx2splunk for iris_evtx module
	RUN chmod +x /iriswebapp/dependencies/evtxdump_binaries/linux/x64/fd
	RUN chmod +x /iriswebapp/dependencies/evtxdump_binaries/linux/x64/evtx_dump

But the new location itself isn't a problem. It becomes a problem because the paths in the code have not been changed accordingly for this.
The function that breaks is building the path by joining APP_PATH, "app", and ASSET_SHOW_PATH:

iris-web/source/app/schema/marshables.py

Lines 160 to 171 in a4bfeda

	try:
	store_fullpath = os.path.join(app.config['ASSET_STORE_PATH'], filename)
	show_fullpath = os.path.join(app.config['APP_PATH'], 'app',
	app.config['ASSET_SHOW_PATH'].strip(os.path.sep),
	filename)
	file.save(store_fullpath)
	os.symlink(store_fullpath, show_fullpath)
	except Exception as e:
	return None, f"Unable to add icon {e}"
	return filename, 'Saved'

The function therefore wants to create a symlink under /iriswebapp/app/static/assets/img/graph/ but the folder does not exist because it's at /iriswebapp/static/assets/img/graph/. It is definitely a bug for v2.5.0-beta.1.
@c8y3 made those changes in #574, maybe he can fix them quickly for the demo.

That said, if you want to use DFIR-IRIS yourself you should probably use a stable version. However, I'm not quite sure what the latest stable release is. The documentation still references v2.4.20 but the latest stable GitHub release is v2.4.26.

[c8y3]

Sorry about the regression. Thanks @I3urny for the detailed analysis.
Unfortunately, I can't help with the deployment of a new version and a new demo.
I still proposed #1002 and #1003 as fixes for the v2.5.0-beta.1 hotfixes and for develop.

[I3urny]

Hi again, sorry to bother but I think we missed one thing:

iris-web/source/app/post_init.py

Lines 1716 to 1731 in 9441d4d

	def custom_assets_symlinks():
	try:
	source_paths = glob.glob(os.path.join(app.config['ASSET_STORE_PATH'], "*"))
	for store_fullpath in source_paths:
	filename = store_fullpath.split(os.path.sep)[-1]
	show_fullpath = os.path.join(app.config['APP_PATH'], 'app',
	app.config['ASSET_SHOW_PATH'].strip(os.path.sep), filename)
	if not os.path.islink(show_fullpath):
	os.symlink(store_fullpath, show_fullpath)
	log.info(f"Created assets img symlink {store_fullpath} -> {show_fullpath}")
	except Exception as e:
	log.error(f"Error: {e}")

The path construction logic is the same and therefore pretty much the same error.
When assets are already present under ASSET_STORE_PATH, this checks for (and tries to create) the symlink at the wrong location.

Here is the log output when restarting IRIS with a custom asset:

2026-01-14 12:29:31 :: WARNING :: module_handler :: register_module :: Module already exists in Iris
2026-01-14 12:29:31 :: INFO :: post_init :: _register_default_modules :: Attempted to add iris_vt_module. Got Module already exists in Iris
2026-01-14 12:29:31 :: WARNING :: module_handler :: register_module :: Module already exists in Iris
2026-01-14 12:29:31 :: INFO :: post_init :: _register_default_modules :: Attempted to add iris_misp_module. Got Module already exists in Iris
2026-01-14 12:29:31 :: WARNING :: module_handler :: register_module :: Module already exists in Iris
2026-01-14 12:29:31 :: INFO :: post_init :: _register_default_modules :: Attempted to add iris_check_module. Got Module already exists in Iris
2026-01-14 12:29:31 :: WARNING :: module_handler :: register_module :: Module already exists in Iris
2026-01-14 12:29:31 :: INFO :: post_init :: _register_default_modules :: Attempted to add iris_webhooks_module. Got Module already exists in Iris
2026-01-14 12:29:31 :: WARNING :: module_handler :: register_module :: Module already exists in Iris
2026-01-14 12:29:31 :: INFO :: post_init :: _register_default_modules :: Attempted to add iris_intelowl_module. Got Module already exists in Iris
2026-01-14 12:29:31 :: INFO :: post_init :: run :: Creating initial customer
2026-01-14 12:29:31 :: INFO :: post_init :: run :: Creating initial case
2026-01-14 12:29:31 :: INFO :: post_init :: run :: Creating symlinks for custom asset icons
2026-01-14 12:29:31 :: ERROR :: post_init :: _custom_assets_symlinks :: Error: [Errno 2] No such file or directory: '/home/iris/server_data/custom_assets/rxmdlhaiheblyntwuo' -> '/iriswebapp/app/static/assets/img/graph/rxmdlhaiheblyntwuo'
2026-01-14 12:29:31 :: INFO :: post_init :: run :: Post-init steps completed
2026-01-14 12:29:31 :: WARNING :: post_init :: run :: ===============================
2026-01-14 12:29:31 :: WARNING :: post_init :: run :: | IRIS IS READY on port  8443 |
2026-01-14 12:29:31 :: WARNING :: post_init :: run :: ===============================