Version in base suite: 0.20220716-2 Base version: ikiwiki-hosting_0.20220716-2 Target version: ikiwiki-hosting_0.20220716-2+deb12u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/i/ikiwiki-hosting/ikiwiki-hosting_0.20220716-2.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/i/ikiwiki-hosting/ikiwiki-hosting_0.20220716-2+deb12u1.dsc changelog | 10 ++++++++++ ikiwiki-hosting-web.init | 4 ++++ ikiwiki-hosting-web.service | 5 +++++ 3 files changed, 19 insertions(+) Unrecognised file line in .dsc: -----BEGIN PGP SIGNATURE----- diff -Nru ikiwiki-hosting-0.20220716/debian/changelog ikiwiki-hosting-0.20220716/debian/changelog --- ikiwiki-hosting-0.20220716/debian/changelog 2023-03-30 09:56:12.000000000 +0000 +++ ikiwiki-hosting-0.20220716/debian/changelog 2024-09-07 09:38:42.000000000 +0000 @@ -1,3 +1,13 @@ +ikiwiki-hosting (0.20220716-2+deb12u1) bookworm; urgency=medium + + [ Simon McVittie ] + * d/ikiwiki-hosting-web.{init,service}: Allow reading other users' repositories. + Each website's git repository is owned by its own uid, and the + git-daemon running as ikiwiki-anon needs to be able to read them all. + (Closes: #1076751) + + -- Salvatore Bonaccorso Sat, 07 Sep 2024 11:38:42 +0200 + ikiwiki-hosting (0.20220716-2) unstable; urgency=medium * d/p/ikisite-backup-Create-the-bundle-as-the-site-s-user.patch: diff -Nru ikiwiki-hosting-0.20220716/debian/ikiwiki-hosting-web.init ikiwiki-hosting-0.20220716/debian/ikiwiki-hosting-web.init --- ikiwiki-hosting-0.20220716/debian/ikiwiki-hosting-web.init 2023-03-30 09:56:12.000000000 +0000 +++ ikiwiki-hosting-0.20220716/debian/ikiwiki-hosting-web.init 2024-09-07 09:37:47.000000000 +0000 @@ -42,6 +42,10 @@ # 2 if daemon could not be started start-stop-daemon --start --chuid $gitdaemonuser:$gitdaemonuser --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \ || return 1 + + export GIT_CONFIG_COUNT=1 + export GIT_CONFIG_KEY_0=safe.directory + export GIT_CONFIG_VALUE_0='*' start-stop-daemon --start --chuid $gitdaemonuser:$gitdaemonuser --quiet --make-pidfile --pidfile $PIDFILE --background --exec $DAEMON -- \ $DAEMON_ARGS \ || return 2 diff -Nru ikiwiki-hosting-0.20220716/debian/ikiwiki-hosting-web.service ikiwiki-hosting-0.20220716/debian/ikiwiki-hosting-web.service --- ikiwiki-hosting-0.20220716/debian/ikiwiki-hosting-web.service 2023-03-30 09:56:12.000000000 +0000 +++ ikiwiki-hosting-0.20220716/debian/ikiwiki-hosting-web.service 2024-09-07 09:37:47.000000000 +0000 @@ -9,6 +9,11 @@ User=ikiwiki-anon Group=ikiwiki-anon Restart=on-failure +# ikiwiki-anon needs to be willing to serve the git repositories of +# websites owned by each site-specific uid +Environment=GIT_CONFIG_COUNT=1 +Environment=GIT_CONFIG_KEY_0=safe.directory +Environment=GIT_CONFIG_VALUE_0=* [Install] WantedBy=multi-user.target