[Pkg-shadow-devel] out of my depth

[Bálint Réczey]

Hi Christian,

2016-12-01 7:16 GMT+01:00 Christian PERRIER <bubulle at debian.org>:
> Quoting Bálint Réczey (balint at balintreczey.hu):
>
>> Thanks, but I still can't push tags.
>> Christian, could you please fix the rights/ACLs or chown -R the repo
>> to me to fix it myself?
>
>
> Well, I need to figure out what's missing:
>
> bubulle at moszumanska:/git/pkg-shadow$ ls -l shadow.git/
> total 36
> drwxrwsr-x   2 bubulle scm_pkg-shadow 4096 juil. 27  2013 branches
> -rw-r--r--   1 nekral  scm_pkg-shadow  362 août   9  2013 config
> -rw-rw-r--   1 bubulle scm_pkg-shadow   24 juil. 27  2013 description
> -rw-rw-r--   1 bubulle scm_pkg-shadow   23 juil. 27  2013 HEAD
> drwxrwsr-x   2 bubulle scm_pkg-shadow 4096 juil. 28  2013 hooks
> drwxrwsr-x   2 bubulle scm_pkg-shadow 4096 juil. 27  2013 info
> drwxrwsr-x 259 bubulle scm_pkg-shadow 4096 mai    4  2014 objects
> -rw-rw-r--   1 bubulle scm_pkg-shadow  438 juil. 27  2013 packed-refs
> drwxrwsr-x   4 bubulle scm_pkg-shadow 4096 nov.  30 16:34 refs
>
> bubulle at moszumanska:/git/pkg-shadow$ ls -l pkg-shadow.git/
> total 32
> drwxrwsr-x  2 root scm_pkg-shadow 4096 juin  13  2014 branches
> -rw-rw-r--  1 root scm_pkg-shadow  126 juin  13  2014 config
> -rw-rw-r--  1 root scm_pkg-shadow   30 juin  13  2014 description
> -rw-rw-r--  1 root scm_pkg-shadow   23 juin  13  2014 HEAD
> drwxrwsr-x  2 root scm_pkg-shadow 4096 juin  13  2014 hooks
> drwxrwsr-x  2 root scm_pkg-shadow 4096 juil. 30 05:09 info
> drwxrwsr-x 75 root scm_pkg-shadow 4096 juil. 30 05:09 objects
> drwxrwsr-x  4 root scm_pkg-shadow 4096 juin  13  2014 refs
>
> Unless I'm mistaken, we're all members of scm_pkg-shadow:
> bubulle at moszumanska:/git/pkg-shadow$ getent group scm_pkg-shadow
> scm_pkg-shadow:x:80580:xrgtn-guest,bubulle,hallyn-guest,rbalint
>
>
> So, well, what's missing, then?

$ git push origin --tags
Counting objects: 1, done.
Writing objects: 100% (1/1), 174 bytes | 0 bytes/s, done.
Total 1 (delta 0), reused 0 (delta 0)
fatal: Unable to create
'/srv/git.debian.org/git/pkg-shadow/shadow.git/refs/tags/upstream/4.4.lock':
Permission denied
fatal: The remote end hung up unexpectedly
fatal: The remote end hung up unexpectedly

$ ls -alh /srv/git.debian.org/git/pkg-shadow/shadow.git/refs/tags/
total 16K
drwxrwsr-x 4 bubulle scm_pkg-shadow 4.0K Nov 30 16:34 .
drwxrwsr-x 4 bubulle scm_pkg-shadow 4.0K Nov 30 16:34 ..
drwxr-sr-x 2 bubulle scm_pkg-shadow 4.0K Nov 20  2014 debian
drwxr-sr-x 2 bubulle scm_pkg-shadow 4.0K Nov 20  2014 upstream

The missing part seems to be:
$ chmod g+w /srv/git.debian.org/git/pkg-shadow/shadow.git/refs/tags/
chmod: changing permissions of
`/srv/git.debian.org/git/pkg-shadow/shadow.git/refs/tags/': Operation
not permitted


Other repositories seem to be using ACL-s.
$ getfacl /srv/git.debian.org/git/pkg-multimedia/kodi.git/refs/
getfacl: Removing leading '/' from absolute path names
# file: srv/git.debian.org/git/pkg-multimedia/kodi.git/refs/
# owner: rbalint
# group: pkg-multimedia
# flags: -s-
user::rwx
group::rwx
group:pkg-multimedia:rwx
group:scm_pkg-multimedia:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:pkg-multimedia:rwx
default:group:scm_pkg-multimedia:rwx
default:mask::rwx
default:other::r-x

Maybe that would do the trick:

$ getfacl /srv/git.debian.org/git/pkg-multimedia/kodi.git | sed
's/multimedia/shadow/;s/rbalint/bubulle/' | setfacl --set-file=-
/srv/git.debian.org/git/pkg-shadow/shadow.git

Cheers,
Balint

>
> Maybe shadow.git/config (the only 644 file) ?
> ---> I just chmod'ed it to 664
>
>