PUID environment variable is ignored in privileged mode

[CorentinWicht]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

Dear Linuxserver support Team,

I may have uncovered an issue with your docker-brave browser such that it seems that the PUID environment variable is ignored and a default value of 911 is assigned when running the container (see my compose file below):

Expected Behavior

Value assigned to PUID should be reflected in the docker log.

Steps To Reproduce

1. Deploy a stack through Portainer using the default config from https://docs.linuxserver.io/images/docker-brave/#usage:

---
services:
  brave:
    image: lscr.io/linuxserver/brave:latest
    container_name: brave
    security_opt:
      - seccomp:unconfined #optional
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
    volumes:
      - /path/to/config:/config
    ports:
      - 3000:3000
      - 3001:3001
    shm_size: "1gb"
    restart: unless-stopped

2. Notice that the PUID value is set to 911 whatever is defined within the PUID environment variable

Environment

- OS: Ubuntu 24.04.2 LTS
- How docker service was installed: Not sure, but container is deployed through Portainer 2.27.9 LTS

CPU architecture

x86-64

Docker creation

brave:
    image: lscr.io/linuxserver/brave:latest
    container_name: brave
    privileged: true
    devices:
      - "/dev/dri:/dev/dri"
    environment:
      - PUID=1000
      - PGID=1000
      - CUSTOM_PORT=3002
      - TZ="TZ=Europe/Zurich"
    volumes:
      - /home/Docker/appdata/Brave:/config
    ports:
      - 3002:3002
      - 3001:3001
    shm_size: "1gb"
    restart: unless-stopped

Container logs

[migrations] started
[migrations] no migrations found
usermod: user abc is currently used by process 56
usermod: user abc is currently used by process 56
usermod: no changes
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    911
User GID:    1000
───────────────────────────────────────
Linuxserver.io version: 1.80.122-ls21
Build-date: 2025-07-17T14:57:11+00:00
───────────────────────────────────────

**** creating video group videork27 with id 993 ****
**** adding /dev/dri/renderD128 to video group videork27 with id 993 ****
**** adding /dev/dri/card0 to video group video with id 44 ****
[custom-init] No custom files found, skipping...
_XSERVTransmkdir: ERROR: euid != 0,directory /tmp/.X11-unix will not be created.
screen 0 shmid 0
[ls.io-init] done.
time="2025-07-18T05:48:09.261629779Z" level=error msg="failed to mount overlay: invalid argument" storage-driver=overlay2
chmod: cannot access '/tmp/selkies*': No such file or directory

[github-actions]

Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.

[aptalca]

Make sure to remove and recreate the container not just restart.

[CorentinWicht]

Make sure to remove and recreate the container not just restart.

I did, but this happened also when I first deployed the compose file.
Could you replicate this issue ?

[aptalca]

It's a function in our baseimages. If there was an issue, it would affect every single image we publish.

Double check your env var to make sure it is set correctly.

You can do a simple test with docker run --rm -e PUID=1000 -e PGID=1000 lscr.io/linuxserver/brave

[thelamer]

No I cannot replicate this

thelamer@drop:~$ docker run --rm -it -e PUID=1000 -e PGID=1000 linuxserver/brave bash
Unable to find image 'linuxserver/brave:latest' locally
latest: Pulling from linuxserver/brave
caaaf68d51ea: Already exists 
c0f8eff906b8: Already exists 
245f8c10cf97: Already exists 
c289e6252ced: Already exists 
3440c641718b: Already exists 
161a048255c5: Already exists 
f4b4a2125c78: Already exists 
e9257c0b2630: Pull complete 
fcc146490ad5: Pull complete 
992fe3ffb7bf: Pull complete 
7a0161b32ccc: Pull complete 
a451ebb7cc90: Pull complete 
e5da5518cbd0: Pull complete 
Digest: sha256:433bf63d9fea7f9eddc0c141ffc4ef08b77f3667ab11daa2b410d72e3a8194cd
Status: Downloaded newer image for linuxserver/brave:latest
[migrations] started
[migrations] no migrations found
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    1000
User GID:    1000
───────────────────────────────────────
Linuxserver.io version: 1.80.122-ls21
Build-date: 2025-07-17T14:57:11+00:00
───────────────────────────────────────

[CorentinWicht]

It's a function in our baseimages. If there was an issue, it would affect every single image we publish.

Double check your env var to make sure it is set correctly.

You can do a simple test with docker run --rm -e PUID=1000 -e PGID=1000 lscr.io/linuxserver/brave

I tried and it works fine when ran through CLI as suggested:

root@ubuntunas:~# docker run --rm -e PUID=1000 -e PGID=1000 lscr.io/linuxserver/brave
[migrations] started
[migrations] no migrations found
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    1000
User GID:    1000
───────────────────────────────────────
Linuxserver.io version: 1.80.122-ls21
Build-date: 2025-07-17T14:57:11+00:00

I think I could identify the issue, it comes from using the argument privileged: true inside my compose file.

You can replicate the error when running (--privileged):

root@ubuntunas:~# docker run --rm --privileged -e PUID=1000 -e PGID=1000 lscr.io/linuxserver/brave
[migrations] started
[migrations] no migrations found
usermod: user abc is currently used by process 56
usermod: user abc is currently used by process 56
usermod: no changes
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝

   Brought to you by linuxserver.io
───────────────────────────────────────

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    911
User GID:    1000
───────────────────────────────────────
Linuxserver.io version: 1.80.122-ls21
Build-date: 2025-07-17T14:57:11+00:00
───────────────────────────────────────

[aptalca]

We'll look into it, but you really don't need privileged for this image

[thelamer]

@aptalca this does not happen with the Debian base, or the selkies debian base.

This is an odd one for sure.

[thelamer]

@CorentinWicht sorry if it came off as dismissive, just this logic for setting up the user has not changed in like a decade and it is super odd that it would only happen on this image.

[aptalca]

usermod: user abc is currently used by process 56 looks like 2 init steps are running concurrently and may be causing a race condition