[ 
https://issues.apache.org/jira/browse/HADOOP-18202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17522848#comment-17522848
 ] 

Ayush Saxena commented on HADOOP-18202:
---------------------------------------

I was able to repro this. Well the exception gives a solution to the problem as 
well. We can add it in our script. Things work post that. Atleast this git step 
passes. It reached the maven step, where I aborted...
{noformat}
diff --git a/dev-support/bin/create-release b/dev-support/bin/create-release
index 31ae6ee1b06..3b159b95846 100755
--- a/dev-support/bin/create-release
+++ b/dev-support/bin/create-release
@@ -535,6 +535,7 @@ function makearelease
 
   big_console_header "Cleaning the Source Tree"
 
+  git config --global --add safe.directory /build/source
   # git clean to clear any remnants from previous build
   run "${GIT}" clean -xdf -e /patchprocess
{noformat}
Do you see any issue using this or something blocking post that as well?

> create-release fails fatal: unsafe repository ('/build/source' is owned by 
> someone else)
> ----------------------------------------------------------------------------------------
>
>                 Key: HADOOP-18202
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18202
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: build
>    Affects Versions: 3.3.4, 3.3.3
>            Reporter: Steve Loughran
>            Priority: Major
>
> The first git command in the create-release docker container is failing as 
> git doesn't consider /build/source to belong to the current user.
> since CVE-2022-24765 and the april 2022 git releases to refuse to work in 
> such directories
> https://github.blog/2022-04-12-git-security-vulnerability-announced/
> {code}
> $ /usr/bin/git clean -xdf -e /patchprocess
> fatal: unsafe repository ('/build/source' is owned by someone else)
> To add an exception for this directory, call:
>       git config --global --add safe.directory /build/source
> {code}



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to