cmd-buildextend-hashlist-experimental: make all directories in tmp checkout readable

[aaradhak]

With reference to the latest changes in systemd-253, on executing cmd-builextend-hashlist-experimental the default tmp dir files configuration automatically creates /etc/credstore with secure permissions. We are changing the find invocation permissions to access the /etc/credstore directory. find can't recurse into /etc/credstore, we add x so that it can recurse into it. With +, find accumulates paths and runs chmod once (or batched by the arg limit). But for this, we need it to chmod the dir before it tries to recurse into it, so we change to ;

Fixes : coreos/fedora-coreos-tracker#1429

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[dustymabe]

The commit message here needs way more context.

What is the problem?
How does this change solve the problem?
Is this fixing any opened issues?

[aaradhak]

The commit message here needs way more context.

What is the problem? How does this change solve the problem? Is this fixing any opened issues?

Yes, I just added it . I wanted to test it and then add the details before opening it for review.

[aaradhak]

@jlebon @dustymabe
Tested cmd-buildextend-hashlist-experimental locally with the changes, it is working:

[coreos-assembler]$ sudo vi /usr/lib/coreos-assembler/cmd-buildextend-hashlist-experimental 
[coreos-assembler]$ cosa buildextend-hashlist-experimental
Hash list created at builds/38.20230303.dev.0/x86_64/exp-hash.json

[jlebon]

I think we can use Closes: for the tracker issue?

Also, instead of "permission changes", how about e.g. "make all directories in tmp checkout readable"?

[dustymabe]

you need to squash the commits into one commit

[aaradhak]

you need to squash the commits into one commit

I have squashed the commits

[dustymabe]

LGTM

[aaradhak]

@dustymabe : there was a W291 (trailing whitespace) error which caused the CI check to fail. Fixed it now. This would need another approval.