From 6383cbb62f0b2f2743e83eb47609fe5d149d1c96 Mon Sep 17 00:00:00 2001
From: echtnurich <ich@echtnurich.de>
Date: Fri, 24 Jan 2025 19:54:31 +0100
Subject: [PATCH] report users and do basic ownership check before trying to
delete repo
---
config/hosts/yate/yate.nix | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/config/hosts/yate/yate.nix b/config/hosts/yate/yate.nix
index 89f225e..236e1f0 100644
--- a/config/hosts/yate/yate.nix
+++ b/config/hosts/yate/yate.nix
@@ -55,12 +55,13 @@
wantedBy = [ "default.target" ];
requires = [ "network-online.target" ];
preStart = ''
- echo \"\n\" >> /run/secrets/git_clone_key
- id
+ echo "\n" >> /run/secrets/git_clone_key
sleep 5
+ id
+ echo "$(stat -c '%U' /var/lib/yate/.git) owns /var/lib/yate/.git"
SSH_SUCCESS=1
${pkgs.openssh}/bin/ssh -q -i /run/secrets/git_clone_key forgejo@git.hamburg.ccc.de 2> /var/lib/yate/SSH_CHECK_LOG || SSH_SUCCESS=0
- if [ $SSH_SUCCESS = 1 ]; then
+ if [[ $SSH_SUCCESS = 1 && $(stat -c '%U' /var/lib/yate/.git) == *yate* ]]; then
rm -rf /var/lib/yate/*
rm -rf /var/lib/yate/.*
env GIT_SSH_COMMAND="${pkgs.openssh}/bin/ssh -i /run/secrets/git_clone_key" ${pkgs.git}/bin/git clone forgejo@git.hamburg.ccc.de:CCCHH/yate-config.git /var/lib/yate