Re: [OE-core] Git and pseudo

["Richard Purdie" <richard.purdie@linuxfoundation.org>]

On Mon, 2022-04-25 at 09:40 +0200, Mike Looijmans wrote:
> Recently GIT got updated with a security fix:
> 
> https://github.blog/2022-04-12-git-security-vulnerability-announced/
> 
> 
> The problem is that this causes all "git" tasks that run within pseudo 
> (most noticably, image recipes) to fail. In many repositories, we use:
> git rev-parse --verify HEAD > /etc/revision
> 
> Or something similar to that. After the GIT update, this now fails with 
> an error like:
> 
> '''
> fatal: unsafe repository ('/home/mike/repository/path' is owned by 
> someone else)
> To add an exception for this directory, call:
> 
>      git config --global --add safe.directory /home/mike/repository/path
> '''
> 
> Apart from doing as it says, or even "git config --global --add 
> safe.directory '*'" anyone have a better idea, especially one that 
> prevents the system thinking I'm someone else (root in the case of pseudo).

https://git.yoctoproject.org/poky/commit/?id=21559199516a31c7635c5f2d874eaa4a92fff0e5

However this isn't quite enough as some things encode the path to git into build
files so the PATH change at do_install isn't enough. igt-gpu-tools via meson in
OE-Core is an example.

Cheers,

Richard