Bug#1023597: FTBFS: t/21-submodule.t: fatal: transport 'file' not allowed

[Paul Gevers]

Hi,

On Mon, 07 Nov 2022 12:31:05 +0100 gregor herrmann <gregoa at debian.org>
wrote:
> libgit-repository-perl's test suite started to fail recently:
> 
> Cloning into '/tmp/M19xNBDPV8/sub'...
> fatal: transport 'file' not allowed
> fatal: clone of '/tmp/tC7mgf7E52' into submodule path '/tmp/M19xNBDPV8/sub' failed at t/21-submodule.t line 46.
> # Looks like your test exited with 128 before it could output anything.
> t/21-submodule.t ...........
> 1..1
> Dubious, test returned 128 (wstat 32768, 0x8000)
> Failed 1/1 subtests

AUR is "fixing" this with "protocol.file.allow=always":
https://wiki.archlinux.org/title/VCS_package_guidelines#Git_submodules

This has a nice write up: 
https://vielmetti.typepad.com/logbook/2022/10/git-security-fixes-lead-to-fatal-transport-file-not-allowed-error-in-ci-systems-cve-2022-39253.html

Paul
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 495 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20221110/4cbbfe11/attachment.sig>