Package: git
Version: 1:2.13.2-3

https://manpages.debian.org/unstable/git-man/git-receive-pack.1.en.html#QUARANTINE_ENVIRONMENT

   3.The pre-receive hook MUST NOT update any refs to point to
   quarantined objects. Other programs accessing the repository will not
   be able to see the objects (and if the pre-receive hook fails, those
   refs would become corrupted). For safety, any ref updates from within
   pre-receive are automatically rejected.

dgit-push-receiver does exactly that.  It has its own quarantine
arrangement, for mainly the same reasons that git now has one.
(Also dgit-push-receiver likes to update some refs that weren't
provided by the caller.  This is also going to be needed for proper
handling of signed pushes.)

I can't easily rip the code out of dgit-push-receiver because that
would make it wrong (in a security-relevant way) on stretch.

Also, I have the problem that git-receive-pack inseparately combines
the two operations "transfer the quarantined objects" and "tell the
client the push succeeded".  So I can't simply do my ref updates after
git-receive-pack has exited.

Can there be a way to disable this feature of git please ?

Ian.

-- 
Ian Jackson <[email protected]>   These opinions are my own.

If I emailed you from an address @fyvzl.net or @evade.org.uk, that is
a private address which bypasses my fierce spamfilter.

Reply via email to