Overview Repositories Revisions Requests Users Attributes Meta

A painless self-hosted Git service.

Edit Package gitea
https://gitea.io/

Gitea is a community managed fork of Gogs, lightweight code hosting solution written in Go and published under the MIT license.

Refresh
Refresh
Source Files
Filename Size Changed
README.SUSE 0000001073 1.05 KB
gitea-1.13.0.tar.gz 0033305934 31.8 MB
gitea-apache-vhost.conf 0000000465 465 Bytes
gitea-apache.conf 0000000708 708 Bytes
gitea-fetch_source_and_node_modules.sh 0000002387 2.33 KB
gitea-node_modules-1.13.0.tar.gz 0070653121 67.4 MB
gitea-rpmlintrc 0000000159 159 Bytes
gitea.app.ini.patch 0000007538 7.36 KB
gitea.changes 0000089678 87.6 KB
gitea.firewall 0000000123 123 Bytes
gitea.firewalld 0000000185 185 Bytes
gitea.profile.csh 0000000030 30 Bytes
gitea.profile.sh 0000000031 31 Bytes
gitea.service 0000000836 836 Bytes
gitea.spec 0000007944 7.76 KB
Revision 59 (latest revision is 158)
Eric Schirra's avatar Eric Schirra (ecsos) accepted request 852572 from Eric Schirra's avatar Eric Schirra (ecsos) (revision 59) 
- Update to 1.13.0
  * SECURITY
  * Add Allow-/Block-List for Migrate & Mirrors (#13610) (#13776)
    - Prevent git operations for inactive users (#13527) (#13536)
    - Disallow urlencoded new lines in git protocol paths if there is a port (#13521) (#13524)
    - Mitigate Security vulnerability in the git hook feature (#13058)
    - Disable DSA ssh keys by default (#13056)
    - Set TLS minimum version to 1.2 (#12689)
    - Use argon as default password hash algorithm (#12688)
Comments 6
Sauer's avatar
Sauer (msauer) -

I spotted two problems with this package:

  • Templates do not work. 'journalctl -eu gitea' says 'permission denied' Solution: The apparmor profile needs to be updated to allow read access to /etc/gitea/templates/**.

  • The commit search functionality in /[owner]/[repo]/[commits]/branch/[branch] does not work

The user sees a 500 Server error

'journalctl -eu gitea' reports "Couldn't JIT the PCRE2 pattern x got -48"

The underlying problem is this:

  - gitea uses the command 'git log --grep=keyword'

  - git uses the PCRE2 library to grep

  - PCRE2 needs memory with write and execute permission

  - systemd denies that because of the setting MemoryDenyWriteExecute=yes in gitea.service

Solution1: 

Now i know that it is not great to allow that for such a wide open application like gitea,
but i don't know any better way right now than to set MemoryDenyWriteExecute=no in gitea.service.

    If anyone has a better way to do this (allow w+x memory for git only) please reply.

Solution2: 

Git has a compile time flag to disable LibPCRE2. One could use a differently compiled git and it should work, albeit slow(er).
Eric Schirra's avatar
Eric Schirra (ecsos) -
maintainer

For apparmor please contact michael@stroeder.com

Eric Schirra's avatar
Eric Schirra (ecsos) -
maintainer

Yes. Appamor or systemd hardening is broken since some weeks. Can you test point C: in README.SUSE? Are your errors gone now?

Dirk Mueller's avatar
Dirk Mueller (dirkmueller) -

thanks for the reports, I will take a look

Georg Pfuetzenreuter's avatar
Georg Pfuetzenreuter (crameleon) -

Hi,

I am trying to build this package with the "bindata" tag which is recommended by Gitea https://docs.gitea.com/next/installation/install-from-source#build and will allow assets to be bundled instead of being fetched remotely. However I think to be facing an issue with the vendored modules:

[  134s] # code.gitea.io/gitea/modules/migration
[  134s] modules/migration/schemas_static.go:14:9: undefined: Assets

Do you happen to know about this?

There is an issue on GitHub but it seems we already use the suggested build process according to the linked sample spec file: https://github.com/go-gitea/gitea/issues/7997

Eric Schirra's avatar
Eric Schirra (ecsos) -
maintainer

The ticket was from me

Upstream doesn't really understand some things about epm and buiilserver. At least that's my impression. Help does not come either. Besides, they are changing things. Sometimes all dependencies are in there. Sometimes a few are missing.

And why do you want to change my build process?

It works without errors.

Among other things, because I do it the way I do it.

openSUSE Build Service is sponsored by
Places