Re: Unable to properly fetch IPFire 2.x source code via Git

[Adolf Belka <adolf.belka@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 2235 bytes --]

Hi Peter,

On 15/09/2024 10:45, Peter Müller wrote:
> Hello *,
>
> pursuant to update APR, I am currently trying to get my local build environment working again.
> After some back and forth, I failed to bring ./make.sh downloadsrc back into a functional state
> (which requires properly processing environment variables for HTTP proxy access), and started
> with a fresh clone of my IPFire 2.x Git repository again.
>
> However, even adding /pub/git/ipfire-2.x.git as a remote origin for the upstream does not work:
> Trying to do so via SSH (ssh://people.ipfire.org/pub/git/ipfire-2.x.git), Git complains:
>
>> fatal: detected dubious ownership in repository at '/pub/git/ipfire-2.x.git'
> It then suggests to run "git config --global --add safe.directory /pub/git/ipfire-2.x.git", which
> however does not change anything - at the next attempt, the same error message is shown.

I have had this recommendation in the past from git. It also didn't help me. I found that this was due to an upgrade in git and if I remember correctly it is to do with the ownership of the .gitconfig local and global being the same. There was some vulnerability that meant that if the ownerships were different someone could do something bad.

 From what I remember, and it is at least from 2023 or maybe even 2022 when I had this problem, you need to make sure that the ownership of the local and global .gitconfig files are the same, or belong to the same group and also that the path from local git repo to the global .gitconfig is traversable by that owner.

This might still not be the fix for you as you are having your problem accessing via ssh and mine was with accessing via git:

> Attempts to fetch the same repository via its https://git.ipfire.org/pub/git/ipfire-2.x.git URL
> fail with an error 500.
>
> Has the way for accessing /pub/git/ipfire-2.x.git changed?

When I am cloning one of the repo's from fresh then the url I am using is

|git://git.ipfire.org/ipfire-2.x.git I have never used the http: version. The git one is still working currently as I have done a test fresh git clone yesterday. Hope this turns out to be useful to you. Regards, Adolf |

> Thanks, and best regards,
> Peter Müller