coffey-labs/ihasmail
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

Let root jobs use a checkout the node job chowned #7

Merged
jcoffey-dev merged 1 commits from ci/safe-directory into main 2026-09-21 06:32:00 +00:00
Conversation 1 Commits 1 Files Changed 1
+8
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitlab-ci.yml
+8
View File
@@ -115,6 +115,12 @@ version:
GIT_DEPTH: "0" GIT_DEPTH: "0"
before_script: before_script:
- apt-get update -qq && apt-get install -y -qq --no-install-recommends git >/dev/null - apt-get update -qq && apt-get install -y -qq --no-install-recommends git >/dev/null
# The build directory is reused between jobs, and the node job chowns it to
# the unprivileged `node` user so its tests can run. A later job running
# git as root then finds the checkout owned by somebody else, and git
# refuses with "detected dubious ownership" (exit 128). Whether it happens
# depends on which cached directory a job lands on, so it comes and goes.
- git config --global --add safe.directory "$CI_PROJECT_DIR"
script: script:
- V="$(node scripts/version.mjs)" - V="$(node scripts/version.mjs)"
- echo "VERSION=$V" > version.env - echo "VERSION=$V" > version.env
@@ -178,6 +184,8 @@ weekly-release:
GIT_DEPTH: "0" GIT_DEPTH: "0"
before_script: before_script:
- apt-get update -qq && apt-get install -y -qq --no-install-recommends git curl jq >/dev/null - apt-get update -qq && apt-get install -y -qq --no-install-recommends git curl jq >/dev/null
# See the version job: same shared directory, same root, same refusal.
- git config --global --add safe.directory "$CI_PROJECT_DIR"
script: script:
- | - |
set -euo pipefail set -euo pipefail