Trying to run flux-local on Gitea facing permission-issue

[spammads]

I try to run flux-local as a Gitea-Workflow.
My Git-User has id 1000 so all repo-files are owned by 1000:1000.
Your container is build with user 1001 (because of Github!?).
So this problem arises in the logs:

INTERNALERROR>   File "/app/flux_local/***_repo.py", line 725, in build_manifest
INTERNALERROR>     results = await kustomization_traversal(selector.path, builder)
INTERNALERROR>               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
INTERNALERROR>   File "/app/flux_local/***_repo.py", line 508, in kustomization_traversal
INTERNALERROR>     path_queue.append((selector.relative_path, None))
INTERNALERROR>                        ^^^^^^^^^^^^^^^^^^^^^^
INTERNALERROR>   File "/app/flux_local/***_repo.py", line 191, in relative_path
INTERNALERROR>     return self.process_path.resolve().relative_to(self.root.resolve())
INTERNALERROR>                                                    ^^^^^^^^^
INTERNALERROR>   File "/app/flux_local/***_repo.py", line 181, in root
INTERNALERROR>     return repo_root(self.repo)
INTERNALERROR>   File "/app/flux_local/***_repo.py", line 144, in repo_root
INTERNALERROR>     return Path(repo.***.rev_parse("--show-toplevel"))
INTERNALERROR>                 ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^
INTERNALERROR>   File "/usr/local/lib/python3.13/site-packages/***/cmd.py", line 986, in <lambda>
INTERNALERROR>     return lambda *args, **kwargs: self._call_process(name, *args, **kwargs)
INTERNALERROR>                                    ~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^
INTERNALERROR>   File "/usr/local/lib/python3.13/site-packages/***/cmd.py", line 1598, in _call_process
INTERNALERROR>     return self.execute(call, **exec_kwargs)
INTERNALERROR>            ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^
INTERNALERROR>   File "/usr/local/lib/python3.13/site-packages/***/cmd.py", line 1388, in execute
INTERNALERROR>     raise GitCommandError(redacted_command, status, stderr_value, stdout_value)
INTERNALERROR> ***.exc.GitCommandError: Cmd('***') failed due to: exit code(128)
INTERNALERROR>   cmdline: *** rev-parse --show-toplevel
INTERNALERROR>   stderr: 'fatal: detected dubious ownership in repository at '/workspace/ck/ck8'
INTERNALERROR> To add an exception for this directory, call:
INTERNALERROR> 
INTERNALERROR> 	*** config --global --add safe.directory /workspace/ck/ck8'

Would be glad how i can circumvent this.
Many thanks for this great tool.

[allenporter]

Hi, this docker image was community contributed and i'm not a docker permissions expert. It looks like there are some workarounds i see on stack overflow like telling git its ok to use -- but not sure what the "right" answer is here.

[spammads]

A little late but still

found a clean workaround that doesn't require changing the image.
I set git's safe.directory via environment variables in the workflow:

env:
  GIT_CONFIG_COUNT: "1"
  GIT_CONFIG_KEY_0: safe.directory
  GIT_CONFIG_VALUE_0: "*"

For Gitea Actions specifically I also needed a chmod step before the container runs:
- name: Fix permissions
run: chmod -R a+rw .

Works reliably heree.