Local Mount Point - Permission denied

[ZinnerC]

I would like to setup BorgUI. So far so good. But somehow I'm not able to mount folders from the machine i run the docker.

What am I missing? The information on BorgUI Docs sounds clear but somehow I don not manage to get it working.

Compose File:

services:
  app:
    image: ainullcode/borg-ui:${BORGUI_VERSION:-release}
    container_name: borg-web-ui
    restart: unless-stopped
    ports:
      - "${PORT:-8081}:${PORT:-8081}"
    volumes:
      - borg_data:${DATA_DIR:-/data}
      - borg_cache:${BORG_CACHE_DIR:-/home/borg/.cache/borg}
      - /etc/localtime:/etc/localtime:ro
      - ${LOCAL_STORAGE_PATH}:/local:rw
      - ${LOCAL_STORAGE_IMMICH}:/immich:rw
    environment:
      - PORT=${PORT:-8081}
      - PUID=${PUID:-1001}
      - PGID=${PGID:-1001}
      - TZ=${TZ:-UTC}
      - LOCAL_MOUNT_POINTS=${LOCAL_MOUNT_POINTS:-/local}
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_DB=0
    depends_on:
      redis:
        condition: service_healthy

  redis:
    image: redis:7-alpine
    container_name: borg-redis
    restart: unless-stopped
    command: >
      redis-server
      --maxmemory 2gb
      --maxmemory-policy allkeys-lru
      --save ""
      --appendonly no
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 3

volumes:
  borg_data:
  borg_cache:

Environment:

BORGUI_VERSION=2.2.5

DATA_DIR = /mnt/CoreStorage/borgui/data
BORG_CACHE_DIR = /mnt/CoreStorage/borgui/cache
LOCAL_MOUNT_POINTS = /local,/immich
#LOCAL_MOUNT_POINTS = /immich

LOCAL_STORAGE_PATH = /home/***myHomeFolder***
LOCAL_STORAGE_IMMICH = /mnt/CoreStorage/immich

PUID = 1000
PGID = 1000

TZ=Europe/Zurich

Checking for the PUID and PGID is used

echo $(id -u) # PUID
echo $(id -g) #PGID

Thanks for all hints :-D

[krotname]

I would check three separate things here: rendered compose, UID inside the container, and host filesystem permissions.

First verify what Docker Compose is actually using:

docker compose config

In particular, make sure these become real absolute host paths:

/home/your-user:/local:rw
/mnt/CoreStorage/immich:/immich:rw

Also keep your .env entries without spaces around = to avoid surprises:

DATA_DIR=/mnt/CoreStorage/borgui/data
BORG_CACHE_DIR=/mnt/CoreStorage/borgui/cache
LOCAL_MOUNT_POINTS=/local,/immich
LOCAL_STORAGE_PATH=/home/your-user
LOCAL_STORAGE_IMMICH=/mnt/CoreStorage/immich
PUID=1000
PGID=1000

Then check what the container can really see:

docker exec -it borg-web-ui id
docker exec -it borg-web-ui sh -lc 'ls -ld /local /immich; touch /local/.borgui-test; rm /local/.borgui-test'

If id is not uid=1000 gid=1000, then the image is not applying PUID/PGID the way you expect. If id is correct but the touch fails, it is a host permission problem.

For bind mounts, Docker does not bypass Linux permissions. The UID/GID inside the container must be able to traverse and read/write the host directories. Check on the host:

ls -ld /home/your-user /mnt/CoreStorage/immich
namei -l /home/your-user
namei -l /mnt/CoreStorage/immich

Every parent directory needs execute (x) permission for UID 1000 or its group, and the mounted directory needs the read/write permissions you expect. If needed, fix with ownership or ACLs, for example:

sudo chown -R 1000:1000 /mnt/CoreStorage/borgui /mnt/CoreStorage/immich
# or, less broad:
sudo setfacl -m u:1000:rwx /mnt/CoreStorage/immich

One more detail: these two lines do not mount host folders into /data and /home/borg/.cache/borg; they mount named Docker volumes at the paths from your variables:

- borg_data:${DATA_DIR:-/data}
- borg_cache:${BORG_CACHE_DIR:-/home/borg/.cache/borg}

If your intention is to store BorgUI data on the host under /mnt/CoreStorage/borgui/..., use host bind mounts instead:

- ${DATA_DIR:-/mnt/CoreStorage/borgui/data}:/data
- ${BORG_CACHE_DIR:-/mnt/CoreStorage/borgui/cache}:/home/borg/.cache/borg

So I would start with docker compose config and the docker exec ... touch test; that will tell you exactly whether the problem is variable expansion, container UID, or host directory permissions.

[alexschumann]

I am facing a similar issue, when trying to import an existing repo I get:

Traceback (most recent call last):
File "/opt/borg2-venv/lib/python3.10/site-packages/borg/archiver/__init__.py", line 608, in main
exit_code = archiver.run(args)
File "/opt/borg2-venv/lib/python3.10/site-packages/borg/archiver/__init__.py", line 485, in run
rc = func(args)
File "/opt/borg2-venv/lib/python3.10/site-packages/borg/archiver/_common.py", line 121, in wrapper
with repository:
File "/opt/borg2-venv/lib/python3.10/site-packages/borg/repository.py", line 190, in __enter__
self.open(exclusive=bool(self.exclusive), lock_wait=self.lock_wait, lock=self.do_lock)
File "/opt/borg2-venv/lib/python3.10/site-packages/borg/repository.py", line 254, in open
self.store.open()
File "/opt/borg2-venv/lib/python3.10/site-packages/borgstore/store.py", line 136, in open
self.backend.open()
File "/opt/borg2-venv/lib/python3.10/site-packages/borgstore/backends/posixfs.py", line 162, in open
self._quota_delete()
File "/opt/borg2-venv/lib/python3.10/site-packages/borgstore/backends/posixfs.py", line 455, in _quota_delete
self._quota_path().unlink()
File "/usr/local/lib/python3.10/pathlib.py", line 1206, in unlink
self._accessor.unlink(self)
PermissionError: [Errno 13] Permission denied: '/local/myrepo/quota.hid'


Platform: Linux fec958ae5ace 6.12.85+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.85-1 (2026-04-30) x86_64
Linux: Unknown Linux
Borg: 2.0.0b21 Python: CPython 3.10.20 msgpack: 1.1.2 fuse: pyfuse3 3.5.0 [mfusepy,pyfuse3,llfuse]
PID: 166 CWD: /app

However, the file quota.hid does not exist in the bind-mounted host directory at all.