Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Git integration with systemd service #1153

Closed
jsosulski opened this issue Mar 16, 2021 · 1 comment
Closed

Git integration with systemd service #1153

jsosulski opened this issue Mar 16, 2021 · 1 comment

Comments

@jsosulski
Copy link

jsosulski commented Mar 16, 2021

I had some issues getting the git version control running as a systemd unit.
After some looking through the issues, especially #876 (comment), i.e. that we need to init git config for user radicale to allow commits I fixed most issues.

After adding --debug to the systemd service execstart command, the following line / error was getting my attention:

fatal: Unable to create '/var/lib/radicale/.git/index.lock': Read-only file system

I noticed that in the default systemd configuration there is an optional line for security purposes:

ReadWritePaths=/var/lib/radicale/collections

This prevents radicale from acquiring a writable lock on /var/lib/radicale/.git/index (I guess). I fixed it for now by changing the line to:

ReadWritePaths=/var/lib/radicale

By doing this, are there serious security implications I am not aware of? If not, I could submit a PR to note this peculiarity when using systemd with git in the documentation.

@tyll
Copy link

tyll commented May 6, 2021

ReadWritePaths=/var/lib/radicale

looks safe to me since there is nothing else in that path - I am not a Radicale developer, though.

@pbiering pbiering closed this as completed Mar 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants