)]}'
{"id":"openstack%2Fdiskimage-builder~837776","triplet_id":"openstack%2Fdiskimage-builder~master~Iebc24a4e5e418f930a31ecbb6dc48b99eb419d58","project":"openstack/diskimage-builder","branch":"master","attention_set":{},"removed_from_attention_set":{"11628":{"account":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"last_update":"2022-04-14 16:40:45.000000000","reason":"Change was abandoned"}},"hashtags":[],"change_id":"Iebc24a4e5e418f930a31ecbb6dc48b99eb419d58","subject":"Mark our source trees as safe for git to use as other users","status":"ABANDONED","created":"2022-04-13 23:18:34.000000000","updated":"2022-04-14 16:40:45.000000000","total_comment_count":4,"unresolved_comment_count":1,"has_review_started":true,"meta_rev_id":"e6b3ceb0400e2f9fcc26a488703aaf32e0caddd8","_number":837776,"virtual_id_number":837776,"owner":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":-1,"date":"2022-04-14 02:31:16.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},{"_account_id":10118,"name":"IBM PowerKVM CI","email":"kvmpower@linux.vnet.ibm.com","username":"powerkvm","tags":["SERVICE_USER"]},{"_account_id":29244,"name":"Gregory Thiemonge","email":"gthiemon@redhat.com","username":"gthiemonge"}],"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2022-04-13 23:54:55.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2022-04-14 00:28:22.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2022-04-14 00:31:08.000000000","updated_by":{"_account_id":10118,"name":"IBM PowerKVM CI","email":"kvmpower@linux.vnet.ibm.com","username":"powerkvm","tags":["SERVICE_USER"]},"reviewer":{"_account_id":10118,"name":"IBM PowerKVM CI","email":"kvmpower@linux.vnet.ibm.com","username":"powerkvm","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2022-04-14 04:05:44.000000000","updated_by":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"reviewer":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"state":"CC"},{"updated":"2022-04-14 04:32:44.000000000","updated_by":{"_account_id":29244,"name":"Gregory Thiemonge","email":"gthiemon@redhat.com","username":"gthiemonge"},"reviewer":{"_account_id":29244,"name":"Gregory Thiemonge","email":"gthiemon@redhat.com","username":"gthiemonge"},"state":"CC"},{"updated":"2022-04-14 11:33:31.000000000","updated_by":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"reviewer":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"state":"CC"}],"messages":[{"id":"a2fda1aae43db8648e5bb4c06583df5572c051bb","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"date":"2022-04-13 23:18:34.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"5456b2481073395ddc6d754f45f912e44bab591d","author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"date":"2022-04-13 23:32:35.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"8e47e0aa22dcd6e8d939394e69931ea871f0358f","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-13 23:54:55.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\n\n- dib-functests-arm64-deb https://zuul.opendev.org/t/openstack/build/e564b16922b241bebac8dffb45080603 : SUCCESS in 25m 29s\n- dib-functests-arm64-rpm https://zuul.opendev.org/t/openstack/build/2f5bdb3e65474a05a74dbed97f170aab : SUCCESS in 32m 47s","accounts_in_message":[],"_revision_number":1},{"id":"0879c5ae907a58aa0f75412d0914c6f01b14480d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-14 00:28:22.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/cbc83e97c3b745fa93158a0ce6b19e95 : SUCCESS in 5m 16s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/df32ffa2e1914c2ebd2977077d0cdbe7 : SUCCESS in 4m 19s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/fba78b4c1b2947d39b0db97b9f678eea : SUCCESS in 4m 25s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/cd3fec0d429d4e5d99fea1ff096626d3 : SUCCESS in 4m 49s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/d40522d1e016482e82a5f49a941a29e0 : SUCCESS in 4m 17s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/152ad7222a00418ead637ff295865f65 : SUCCESS in 3m 42s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/94b711167b8a40888317fa2c23ad44e9 : SUCCESS in 4m 15s (non-voting)\n- openstack-tox-pylint https://zuul.opendev.org/t/openstack/build/9977bea59be346c0bca25b93485ffd45 : SUCCESS in 4m 02s\n- dib-functests https://zuul.opendev.org/t/openstack/build/0fe35f0fec3d4c568b7e121248f4295f : SUCCESS in 50m 08s\n- opendev-buildset-registry https://zuul.opendev.org/t/openstack/build/e44261d7002141f9a8f8c8ac6605a4d2 : SUCCESS in 1h 06m 40s\n- nodepool-build-image-siblings https://zuul.opendev.org/t/openstack/build/75b60547c7794a859ca880765fa55012 : SUCCESS in 14m 47s\n- dib-nodepool-functional-openstack-centos-7-src https://zuul.opendev.org/t/openstack/build/ff3125e34ac44bdb988655502f429c55 : SUCCESS in 40m 44s\n- dib-nodepool-functional-openstack-centos-8-stream-src https://zuul.opendev.org/t/openstack/build/e996266291d24450937e4e2c496b066e : SUCCESS in 37m 14s\n- dib-nodepool-functional-openstack-centos-9-stream-src https://zuul.opendev.org/t/openstack/build/ddc65fb714304b3a866fb1e92c04597a : SUCCESS in 35m 45s\n- dib-nodepool-functional-openstack-fedora-35-containerfile-src https://zuul.opendev.org/t/openstack/build/b53fcfb871454bf39e5a79d0cf806c0b : SUCCESS in 39m 32s\n- dib-nodepool-functional-openstack-rockylinux-8-containerfile-src https://zuul.opendev.org/t/openstack/build/6f5fe7848b59469fbbd0ecda8c38ca7a : SUCCESS in 39m 09s (non-voting)\n- dib-nodepool-functional-openstack-ubuntu-xenial-src https://zuul.opendev.org/t/openstack/build/11d62c9215da42429b4aac71c69e4113 : SUCCESS in 38m 47s\n- dib-nodepool-functional-openstack-ubuntu-bionic-src https://zuul.opendev.org/t/openstack/build/ba1d5b2f33a5456c962e3de3e83ddf84 : SUCCESS in 35m 31s\n- dib-nodepool-functional-openstack-ubuntu-focal-src https://zuul.opendev.org/t/openstack/build/293627b8be4d49df8037bfe934623f6e : SUCCESS in 33m 29s\n- dib-nodepool-functional-openstack-opensuse-15-src https://zuul.opendev.org/t/openstack/build/28c763d35e4745cca18a8899ad55e09b : FAILURE in 44m 11s (non-voting)\n- dib-nodepool-functional-openstack-opensuse-tumbleweed-src https://zuul.opendev.org/t/openstack/build/cc81a32469ba47a2b0a85cee842341b6 : FAILURE in 31m 47s (non-voting)\n- dib-nodepool-functional-openstack-gentoo-src https://zuul.opendev.org/t/openstack/build/b4b8b115a61e43bbaae6e5c2de37ad2f : FAILURE in 27m 23s (non-voting)\n- dib-nodepool-functional-openstack-debian-bullseye-src https://zuul.opendev.org/t/openstack/build/a14c87c1b37e479ebc61b7ef0ee36284 : SUCCESS in 32m 28s (non-voting)\n- ironic-python-agent-check-image-dib-centos8 https://zuul.opendev.org/t/openstack/build/53415bc2776a4c6583cb9154bb29ff2d : FAILURE in 5m 07s\n- ipa-tempest-bios-ipmi-direct-src https://zuul.opendev.org/t/openstack/build/92ccd174c7ee442b972468b8e68c5d08 : FAILURE in 37m 45s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"336ef984d2fe003cec3d55bd482bd8ae851452eb","author":{"_account_id":10118,"name":"IBM PowerKVM CI","email":"kvmpower@linux.vnet.ibm.com","username":"powerkvm","tags":["SERVICE_USER"]},"date":"2022-04-14 00:31:08.000000000","message":"Patch Set 1:\n\nBuild failed. Test completed on IBM PowerKVM platform. For rechecking only on the IBM PowerKVM CI, add a review comment with pkvm- recheck. For contact and more information, see https://wiki.openstack.org/wiki/PowerKVM\n\n- dib-functests-bionic-python3 finger://zuul-v3-executor.novalocal/597b44a397fb46f7991b23a4b41ca82a : POST_FAILURE in 1h 00m 42s","accounts_in_message":[],"_revision_number":1},{"id":"7493689f207d5a743002515decfae1b9c798d56a","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"date":"2022-04-14 00:53:16.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"6fe50ccb5237aadb1b7a36f587fe48049e3cd7df","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-14 01:32:46.000000000","message":"Patch Set 2:\n\nBuild succeeded (ARM64 pipeline).\n\n- dib-functests-arm64-deb https://zuul.opendev.org/t/openstack/build/c83273b9eb47446cb20eb47edb6d7cee : SUCCESS in 29m 10s\n- dib-functests-arm64-rpm https://zuul.opendev.org/t/openstack/build/b4d89ddb3f204185ba7e469df0b09dd2 : SUCCESS in 37m 30s","accounts_in_message":[],"_revision_number":2},{"id":"f13d5e2bde5948cf610690797459a386fbadeed2","author":{"_account_id":10118,"name":"IBM PowerKVM CI","email":"kvmpower@linux.vnet.ibm.com","username":"powerkvm","tags":["SERVICE_USER"]},"date":"2022-04-14 02:26:37.000000000","message":"Patch Set 2:\n\nBuild failed. Test completed on IBM PowerKVM platform. For rechecking only on the IBM PowerKVM CI, add a review comment with pkvm- recheck. For contact and more information, see https://wiki.openstack.org/wiki/PowerKVM\n\n- dib-functests-bionic-python3 finger://zuul-v3-executor.novalocal/c0f7afa2ed564e48aa61a30144aad7ae : POST_FAILURE in 1h 00m 15s","accounts_in_message":[],"_revision_number":2},{"id":"e31cd2101522664c3b650e4f80265fe1a7463bc8","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-04-14 02:31:16.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/14cb3133b18f42caa67eac9b30c056cb : SUCCESS in 4m 41s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/522c7995e0e5486694505d35ed729026 : SUCCESS in 3m 55s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/0e1e6a695e404785b1a21efeee5861cb : SUCCESS in 4m 12s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/61a8586e0f2d4701b6ebd73aaf277768 : SUCCESS in 4m 07s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/58e5c9b4ae2e403cb87e91b52e6966b7 : SUCCESS in 4m 02s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/e442769596df4c5ca3d5c755ed2353e7 : SUCCESS in 3m 44s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/64c4c26829734372a1ec035efe2cc884 : SUCCESS in 4m 23s (non-voting)\n- openstack-tox-pylint https://zuul.opendev.org/t/openstack/build/bb18d62dbc334a01b6620939ecf9395c : SUCCESS in 4m 25s\n- dib-functests https://zuul.opendev.org/t/openstack/build/0550f04f8c594092a7fc6572a5919aea : SUCCESS in 43m 18s\n- opendev-buildset-registry https://zuul.opendev.org/t/openstack/build/498d8e2f08be4b028a79998c74839e82 : SUCCESS in 1h 20m 55s\n- nodepool-build-image-siblings https://zuul.opendev.org/t/openstack/build/b1ddeba5b74c4676b31db38bd30e6f1a : SUCCESS in 15m 06s\n- dib-nodepool-functional-openstack-centos-7-src https://zuul.opendev.org/t/openstack/build/5c5a9ea6fb3a4aa7a259f6688e9d2411 : SUCCESS in 37m 00s\n- dib-nodepool-functional-openstack-centos-8-stream-src https://zuul.opendev.org/t/openstack/build/d0751e7e061c4f4dac097331264fe884 : SUCCESS in 43m 48s\n- dib-nodepool-functional-openstack-centos-9-stream-src https://zuul.opendev.org/t/openstack/build/59d3567c992742ba986e16109377b731 : SUCCESS in 36m 05s\n- dib-nodepool-functional-openstack-fedora-35-containerfile-src https://zuul.opendev.org/t/openstack/build/44d7b75111494a93a33369e0ef2278e8 : SUCCESS in 45m 08s\n- dib-nodepool-functional-openstack-rockylinux-8-containerfile-src https://zuul.opendev.org/t/openstack/build/a3f0cff196bf46c1bf93bb7e6ec0c007 : SUCCESS in 39m 40s (non-voting)\n- dib-nodepool-functional-openstack-ubuntu-xenial-src https://zuul.opendev.org/t/openstack/build/6dde791b5a684b0ba0677bfed34e64b9 : SUCCESS in 30m 27s\n- dib-nodepool-functional-openstack-ubuntu-bionic-src https://zuul.opendev.org/t/openstack/build/b3f52f2c02f54d069ffc240673df6c26 : SUCCESS in 31m 07s\n- dib-nodepool-functional-openstack-ubuntu-focal-src https://zuul.opendev.org/t/openstack/build/9d51d5a091864d1f85e1f367c543ac13 : SUCCESS in 34m 48s\n- dib-nodepool-functional-openstack-opensuse-15-src https://zuul.opendev.org/t/openstack/build/92384f54c77a4d1dbfff4c4e5924ece5 : FAILURE in 44m 40s (non-voting)\n- dib-nodepool-functional-openstack-opensuse-tumbleweed-src https://zuul.opendev.org/t/openstack/build/596f5aea72f042fd8b51e3bc8ac1aa97 : FAILURE in 38m 46s (non-voting)\n- dib-nodepool-functional-openstack-gentoo-src https://zuul.opendev.org/t/openstack/build/bd3f48d914694328bf3e9c92ebd5bb00 : FAILURE in 26m 48s (non-voting)\n- dib-nodepool-functional-openstack-debian-bullseye-src https://zuul.opendev.org/t/openstack/build/09b18b95198b446e9d61a89efe31ea43 : SUCCESS in 37m 36s (non-voting)\n- ironic-python-agent-check-image-dib-centos8 https://zuul.opendev.org/t/openstack/build/2d77129a8a424348969a03ee6c5afb9c : FAILURE in 4m 56s\n- ipa-tempest-bios-ipmi-direct-src https://zuul.opendev.org/t/openstack/build/d6cb75d59a4348dab17b1cd013d9e50c : SUCCESS in 1h 32m 41s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"6c04692fda40f3aa5ec30f4e0b62a50fa5d33073","author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"date":"2022-04-14 04:05:44.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"5eb7bfc34ebb4fae9f129203975ff08193025b02","author":{"_account_id":29244,"name":"Gregory Thiemonge","email":"gthiemon@redhat.com","username":"gthiemonge"},"date":"2022-04-14 04:32:44.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"6e688b47be12ab4227cf4e5e201d6f396df7c556","author":{"_account_id":7118,"name":"Ian Wienand","email":"iwienand@redhat.com","username":"iwienand"},"date":"2022-04-14 06:16:21.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"11671cd92b7ad4cffc6b7ba398052f0ad521440e","author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"date":"2022-04-14 11:33:31.000000000","message":"Patch Set 2:\n\nI\u0027ve +2\u0027d the alternative approach since 1. it\u0027s already passing tests, and 2. it doesn\u0027t involve any lingering Git configuration so should be more robust.","accounts_in_message":[],"_revision_number":2},{"id":"e6b3ceb0400e2f9fcc26a488703aaf32e0caddd8","tag":"autogenerated:gerrit:abandon","author":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"date":"2022-04-14 16:40:45.000000000","message":"Abandoned\n\nAbandoning in favor of https://review.opendev.org/c/openstack/diskimage-builder/+/837824","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"ae873bd60bc5b1caab448df8c595cf69d1abb00a","revisions":{"1fc8766290f6367ef0a3ea38e61b7330aad2ab87":{"kind":"REWORK","_number":1,"created":"2022-04-13 23:18:34.000000000","uploader":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"ref":"refs/changes/76/837776/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/diskimage-builder","ref":"refs/changes/76/837776/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/diskimage-builder refs/changes/76/837776/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/diskimage-builder refs/changes/76/837776/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/diskimage-builder refs/changes/76/837776/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/diskimage-builder refs/changes/76/837776/1"}}},"commit":{"parents":[{"commit":"709d18fd4288c5c3208d720cc414d86f0c0b7988","subject":"Merge \"Update fedora element testing to F35\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/diskimage-builder/commit/709d18fd4288c5c3208d720cc414d86f0c0b7988"}]}],"author":{"name":"Michael Johnson","email":"johnsomor@gmail.com","date":"2022-04-13 23:15:08.000000000","tz":0},"committer":{"name":"Michael Johnson","email":"johnsomor@gmail.com","date":"2022-04-13 23:18:32.000000000","tz":0},"subject":"Mark our source trees as safe for git to use as other users","message":"Mark our source trees as safe for git to use as other users\n\ngit commit [1] introduced a new behaviour to work around a CVE that\ndisallows any git operations in directories not owned by the current\nuser.\n\nThe diskimage-builder source-repository element moves between running git\nunder sudo and running git as the user running diskimage-builder.\nThis causes the element to fail with (example):\nfatal: unsafe repository (\u0027/tmp/dib_build.P9HjJ2qE/mnt/opt/octavia-lib\u0027 is\nowned by someone else)\n\nThis uses the only available configuration option to avoid that by\nglobally setting the source directories we clone as safe.  This is an\nencroachment of the global system for sure, but is about the only\nswitch available at the moment.  For discussion of other approaches,\nsee [2].\n\nRelated-Bug: https://bugs.launchpad.net/devstack/+bug/1968798\n\n[1] https://github.com/git/git/commit/8959555cee7ec045958f9b6dd62e541affb7e7d9\n[2] https://review.opendev.org/c/openstack/devstack/+/837636\n\nChange-Id: Iebc24a4e5e418f930a31ecbb6dc48b99eb419d58\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/diskimage-builder/commit/1fc8766290f6367ef0a3ea38e61b7330aad2ab87"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/diskimage-builder/commit/1fc8766290f6367ef0a3ea38e61b7330aad2ab87"}]},"branch":"refs/heads/master"},"ae873bd60bc5b1caab448df8c595cf69d1abb00a":{"kind":"REWORK","_number":2,"created":"2022-04-14 00:53:16.000000000","uploader":{"_account_id":11628,"name":"Michael Johnson","email":"johnsomor@gmail.com","username":"johnsom"},"ref":"refs/changes/76/837776/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/diskimage-builder","ref":"refs/changes/76/837776/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/diskimage-builder refs/changes/76/837776/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/diskimage-builder refs/changes/76/837776/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/diskimage-builder refs/changes/76/837776/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/diskimage-builder refs/changes/76/837776/2"}}},"commit":{"parents":[{"commit":"709d18fd4288c5c3208d720cc414d86f0c0b7988","subject":"Merge \"Update fedora element testing to F35\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/diskimage-builder/commit/709d18fd4288c5c3208d720cc414d86f0c0b7988"}]}],"author":{"name":"Michael Johnson","email":"johnsomor@gmail.com","date":"2022-04-13 23:15:08.000000000","tz":0},"committer":{"name":"Michael Johnson","email":"johnsomor@gmail.com","date":"2022-04-14 00:53:08.000000000","tz":0},"subject":"Mark our source trees as safe for git to use as other users","message":"Mark our source trees as safe for git to use as other users\n\ngit commit [1] introduced a new behaviour to work around a CVE that\ndisallows any git operations in directories not owned by the current\nuser.\n\nThe diskimage-builder source-repository element moves between running git\nunder sudo and running git as the user running diskimage-builder.\nThis causes the element to fail with (example):\nfatal: unsafe repository (\u0027/tmp/dib_build.P9HjJ2qE/mnt/opt/octavia-lib\u0027 is\nowned by someone else)\n\nThis uses the only available configuration option to avoid that by\nglobally setting the source directories we clone as safe.  This is an\nencroachment of the global system for sure, but is about the only\nswitch available at the moment.  For discussion of other approaches,\nsee [2].\n\nRelated-Bug: https://bugs.launchpad.net/devstack/+bug/1968798\n\n[1] https://github.com/git/git/commit/8959555cee7ec045958f9b6dd62e541affb7e7d9\n[2] https://review.opendev.org/c/openstack/devstack/+/837636\n\nChange-Id: Iebc24a4e5e418f930a31ecbb6dc48b99eb419d58\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/diskimage-builder/commit/ae873bd60bc5b1caab448df8c595cf69d1abb00a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/diskimage-builder/commit/ae873bd60bc5b1caab448df8c595cf69d1abb00a"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}