GNU bug report logs - #64648
Can't clone a git repo over anonymous SSH

Previous Next

Package: guix;

Reported by: Edouard Klein <edou <at> rdklein.fr>

Date: Sat, 15 Jul 2023 13:31:02 UTC

Severity: normal

Full log


View this message in rfc822 format

From: Edouard Klein <edou <at> rdklein.fr>
To: Maxim Cournoyer <maxim.cournoyer <at> gmail.com>
Cc: 64648 <at> debbugs.gnu.org
Subject: bug#64648: Can't clone a git repo over anonymous SSH
Date: Mon, 31 Jul 2023 11:18:04 +0200
Hi !

>
> Don't they also offer a HTTP(S) access?  I think libssh as used by
> libgit2 expects an SSH agent running... I remember wresting with it in a
> CI context.

Well, "they" is me :) I finally opened up anonymous access via git://
but I'm not extatic about it, it's one more daemon that can be pwnd.

https://gitlab.com/edouardklein/guix/-/commit/40e320d14b4c583214cdbd45fb47453c5ebb762a

The dedicated service did not work so I rolled my own as a
sheperd-root-service. I did not have the time to look into the issue.

So the problem remains, but is less urgent because it has been worked
around for now. Fixing this upstream seems like a hard battle.




This bug report was last modified 2 years and 36 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.