detected dubious ownership in repository

[lbussy]

Error during install (and probably upgrades):

Cloning into '/home/brewpi'...
Already on 'main'
Your branch is up to date with 'origin/main'.
fatal: detected dubious ownership in repository at '/home/brewpi'
To add an exception for this directory, call:

git config --global --add safe.directory /home/brewpi

ERROR: Unable to find my repository, did you move this file or not run as root?

*** ERROR ERROR ERROR ERROR ERROR ***
-------------------------------------

See above lines for error message.
Setup NOT completed.

Described here:

Cause

A change was introduced in git 2.35.2 (and newer) to prevent a user from executing git commands in a repository owned by a different user. This is to address a security risk, CVE-2022-24765, for more details see setup_git_directory and Git security vulnerability announced. The change to setup_git_directory prevents git invocations from executing commands on a repository owned by another user.

For now, this can be worked around with an alternate install path:

curl -L https://raw.githubusercontent.com/brewpi-remix/brewpi-tools-rmx/CVE-2022-24765/bootstrap.sh | sudo bash

[intergil]

Workaround is good. Tested on PI 3 and original PI B+ V1.2 succesfully.

[lbussy]

Workaround is good. Tested on PI 3 and original PI B+ V1.2 successfully.

Thank you, I really need to just fix this ...

[lbussy]

Merged to devel.

[lbussy]

Fixed, closing.