summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMarek Paśnikowski <marek@marekpasnikowski.pl>2024-01-14 09:51:16 +0100
committerMarek Paśnikowski <marek@marekpasnikowski.pl>2024-01-14 09:51:16 +0100
commit38a87de2d6d1f71530c8590d2ae9db5d142f8e6f (patch)
treeffbf646a660c70cdcaf58a8f3351544eb3a1228e
parent78c6048843fbea0158290aecc878366ef70c4fc8 (diff)
Allow cgit to see gitolite repositories
The gitolite service is implemented in such a way, that only the git group can access the gitolite home directory. This blocks cgit from accessing the repositories subfolder. The simple addition of the executable bit on the /var/lib/gitolite directory allows the access to the desired subfolder without actually exposing any other contents of the gitolite home directory. Additionaly a reminder to upstream this change is emitted on each system reconfiguration.
-rw-r--r--home-configuration.scm6
-rw-r--r--izumi.org6
2 files changed, 10 insertions, 2 deletions
diff --git a/home-configuration.scm b/home-configuration.scm
index f409f1a..86fb5d6 100644
--- a/home-configuration.scm
+++ b/home-configuration.scm
@@ -157,7 +157,11 @@
(string-append
"sudo guix system reconfigure "
configuration-prefix
- "system-configuration.scm "))
+ "system-configuration.scm "
+ and
+ "sudo chmod 751 /var/lib/gitolite "
+ and
+ "echo 'WARNING: Upstream the correct permission bits to gitolite.'"))
(update-system
(string-append
pull-guix
diff --git a/izumi.org b/izumi.org
index daf3472..0fd8277 100644
--- a/izumi.org
+++ b/izumi.org
@@ -843,7 +843,11 @@
(string-append
"sudo guix system reconfigure "
configuration-prefix
- "system-configuration.scm "))
+ "system-configuration.scm "
+ and
+ "sudo chmod 751 /var/lib/gitolite "
+ and
+ "echo 'WARNING: Upstream the correct permission bits to gitolite.'"))
(update-system
(string-append
pull-guix