[HADOOP-18202] create-release fails fatal: unsafe repository ('/build/source' is owned by someone else)

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.5, 3.3.3
• Fix Version/s: 3.4.0, 3.3.3
• Component/s: build
• Labels: pull-request-available
• Target Version/s: 3.4.0, 3.3.3
• Hadoop Flags: Reviewed
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 14/Apr/22 16:55
• Updated: 28/Jan/24 08:27
• Resolved: 18/Apr/22 18:34

Description

The first git command in the create-release docker container is failing as git doesn't consider /build/source to belong to the current user.

since CVE-2022-24765 and the april 2022 git releases to refuse to work in such directories

https://github.blog/2022-04-12-git-security-vulnerability-announced/

$ /usr/bin/git clean -xdf -e /patchprocess
fatal: unsafe repository ('/build/source' is owned by someone else)
To add an exception for this directory, call:

	git config --global --add safe.directory /build/source

Issue Links

• blocks: HADOOP-18198 Release Hadoop 3.3.3: hadoop-3.3.2 with some fixes
• links to: GitHub Pull Request #4188
• links to: GitHub Pull Request #4190
• links to: ubuntu discussion