From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:59102) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1d6CTZ-0002rt-Ag for guix-patches@gnu.org; Thu, 04 May 2017 04:51:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1d6CTW-0003pj-9A for guix-patches@gnu.org; Thu, 04 May 2017 04:51:05 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:55314) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1d6CTW-0003pE-5P for guix-patches@gnu.org; Thu, 04 May 2017 04:51:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1d6CTV-0006Go-Oe for guix-patches@gnu.org; Thu, 04 May 2017 04:51:01 -0400 Subject: bug#26717: [PATCH] gnu: gitolite: Avoid references to the store in authorized_keys. Resent-Message-ID: References: <87wpa1q2po.fsf@lassieur.org> <20170430163244.2830-1-clement@lassieur.org> <20170430193117.setdri6ykdbbmza3@abyayala> <87lgqhd0d5.fsf@lassieur.org> From: =?UTF-8?Q?Cl=C3=A9ment?= Lassieur In-reply-to: <87lgqhd0d5.fsf@lassieur.org> Date: Thu, 04 May 2017 10:50:17 +0200 Message-ID: <87d1bpatva.fsf@lassieur.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: ng0 Cc: 26717@debbugs.gnu.org Clément Lassieur writes: > ng0 writes: >> This looks good. I have yet to test it. Do you think we could fix the hook files of gitolite like this too? > > Well, I don't think so because the mechanism used in hooks is different: > the reference to the store is in the shebang and shebangs need absolute > paths, they don't look at PATH. We could use 'env' though, as suggested > by Marius here: > http://lists.gnu.org/archive/html/guix-patches/2017-03/msg00339.html. > As in: > > #!/run/current-system/profile/bin/env perl > > Assuming /run/current-system/profile/bin/env exists on all possible > setups. WDYT? This won't work on a non-GuixSD OS. I can't find a simple solution.