From 18c94ebbe352db3b413211f3093fef9aeb223cc7 Mon Sep 17 00:00:00 2001 From: Jeremi Piotrowski Date: Mon, 4 Sep 2023 17:22:47 +0200 Subject: [PATCH] kata-deploy: Create kata-static.tar with correct ownership Pass --owner and --group to the tar invokation to prevent gihtub runner user from leaking into release artifacts. Fixes: #7832 Signed-off-by: Jeremi Piotrowski --- .../kata-deploy/local-build/kata-deploy-merge-builds.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/packaging/kata-deploy/local-build/kata-deploy-merge-builds.sh b/tools/packaging/kata-deploy/local-build/kata-deploy-merge-builds.sh index ff5ed3e4f1..9d9ee3c40f 100755 --- a/tools/packaging/kata-deploy/local-build/kata-deploy-merge-builds.sh +++ b/tools/packaging/kata-deploy/local-build/kata-deploy-merge-builds.sh @@ -37,5 +37,5 @@ pushd ${tarball_content_dir} popd echo "create ${tar_path}" -(cd "${tarball_content_dir}"; tar cvfJ "${tar_path}" .) +(cd "${tarball_content_dir}"; tar cvfJ "${tar_path}" --owner=0 --group=0 .) popd