Homelab AI SRE Agent: AURA Debugs Container Permissions in Docker

Mezmo

Aug 7, 2026

A root cause is not a fix. AURA keeps working the problem, taking what you find on the host and coming back with the user ID mismatch behind the failure.

Learn more about AURA → https://www.mezmo.com/aura
Get started today → https://github.com/mezmo/aura
Get deployment help → https://www.mezmo.com/contact

What follows a root cause is normally manual: check the mount, compare ownership on the host against the user inside the container, and get it wrong at least once before it lands.

The interesting part is what AURA does not know. It is running the baseline config from the first homelab video, with a Grafana MCP server added and an incident response worker removed, so it has no idea the stack runs on Docker Compose and no idea what the containers are called. Its first suggestions are generic Docker steps, one of which cannot run at all because the container is restarting. Closing that gap means supplying the facts by hand: the volume is mounted read-write, the host directory is 775 and owned by apps, and exec into the container is not available.

From there AURA is working on general knowledge, the same as any other LLM. The difference is that it is carrying the entire investigation, so the answer lands on the specific mismatch, a container running as govee against a host directory owned by apps, and offers two ways to resolve it rather than a list of things to try. Nothing is remediated on camera.

That gap is also the argument for building the config out. Every fact supplied by hand here is a data source the agent could have reached on its own.

AURA is built for SREs and homelab operators who need the follow-up questions answered with their environment in view, not just the first diagnosis.

View this story on our website at https://www.mezmo.com/videos/homelab-ai-sre-agent-debug-docker-container-permissions

Chapters:

0:00 What the first homelab video set up

1:01 How the homelab is instrumented

1:43 The root cause AURA returns

2:38 Asking for guidance on filesystem permissions

3:17 Where a default config leaves the agent guessing

4:00 Checking the mount, the host path, and the directory

5:24 Feeding the findings back to AURA

5:54 Checking what user the container runs as