[jira] [Commented] (HADOOP-18202) create-release fails fatal: unsafe repository ('/build/source' is owned by someone else)

["Ayush Saxena (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-18202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17522848#comment-17522848 ] 

Ayush Saxena commented on HADOOP-18202:
---------------------------------------

I was able to repro this. Well the exception gives a solution to the problem as well. We can add it in our script. Things work post that. Atleast this git step passes. It reached the maven step, where I aborted...
{noformat}
diff --git a/dev-support/bin/create-release b/dev-support/bin/create-release
index 31ae6ee1b06..3b159b95846 100755
--- a/dev-support/bin/create-release
+++ b/dev-support/bin/create-release
@@ -535,6 +535,7 @@ function makearelease
 
   big_console_header "Cleaning the Source Tree"
 
+  git config --global --add safe.directory /build/source
   # git clean to clear any remnants from previous build
   run "${GIT}" clean -xdf -e /patchprocess
{noformat}
Do you see any issue using this or something blocking post that as well?

> create-release fails fatal: unsafe repository ('/build/source' is owned by someone else)
> ----------------------------------------------------------------------------------------
>
>                 Key: HADOOP-18202
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18202
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: build
>    Affects Versions: 3.3.4, 3.3.3
>            Reporter: Steve Loughran
>            Priority: Major
>
> The first git command in the create-release docker container is failing as git doesn't consider /build/source to belong to the current user.
> since CVE-2022-24765 and the april 2022 git releases to refuse to work in such directories
> https://github.blog/2022-04-12-git-security-vulnerability-announced/
> {code}
> $ /usr/bin/git clean -xdf -e /patchprocess
> fatal: unsafe repository ('/build/source' is owned by someone else)
> To add an exception for this directory, call:
> 	git config --global --add safe.directory /build/source
> {code}



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org