Page MenuHomePhabricator

Git security update has broken repository state synching
Closed, ResolvedPublic

Description

During exports:

Unable to synchronize the state for repository: XXX

This is because git fails to get repository state of the read-only repo:

fatal: detected dubious ownership in repository at '/resources/projects/XXX'

Issue 1) Exports should likely stop instead of continuing if state cannot be synced

Issue 2) Figure out a solution to restore state syncing

Event Timeline

Nikerabbit triaged this task as Unbreak Now! priority.Jan 30 2023, 1:32 PM

I'm stopping automated exports for now for safety.

twn:/etc/systemd/system$ sudo systemctl stop autoexport.timer
twn:/etc/systemd/system$ sudo systemctl disable autoexport.timer
Removed /etc/systemd/system/timers.target.wants/autoexport.timer.

Change 885276 had a related patch set uploaded (by Nikerabbit; author: Nikerabbit):

[translatewiki@master] Skip translation updates for a repository if state sync fails

https://gerrit.wikimedia.org/r/885276

Change 885277 had a related patch set uploaded (by Nikerabbit; author: Nikerabbit):

[translatewiki@master] Use l10n-bot user also for translation imports

https://gerrit.wikimedia.org/r/885277

Change 885276 merged by jenkins-bot:

[translatewiki@master] Skip translation updates for a repository if state sync fails

https://gerrit.wikimedia.org/r/885276

Change 885277 merged by jenkins-bot:

[translatewiki@master] Use l10n-bot user also for translation imports

https://gerrit.wikimedia.org/r/885277

Change 885299 had a related patch set uploaded (by Nikerabbit; author: Nikerabbit):

[translatewiki@master] Use l10n-bot user for autoimports

https://gerrit.wikimedia.org/r/885299

Change 885299 merged by jenkins-bot:

[translatewiki@master] Use l10n-bot user for autoimports

https://gerrit.wikimedia.org/r/885299

Nikerabbit claimed this task.

After some manual testing. I think this is now fixed. Will reopen if any further issues are noticed.