mirror of
				https://github.com/go-gitea/gitea.git
				synced 2025-10-31 21:28:11 +09:00 
			
		
		
		
	Support GITEA_I_AM_BEING_UNSAFE_RUNNING_AS_ROOT env (#29788)
It is convenient to skip by setting environment, since it's OK to use root user in job containers. It's not a bug, but I want to backport it to v1.21 since it doesn't break anything. --------- Co-authored-by: Giteabot <teabot@gitea.io> Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
This commit is contained in:
		| @@ -13,6 +13,7 @@ import ( | ||||
|  | ||||
| 	"code.gitea.io/gitea/modules/log" | ||||
| 	"code.gitea.io/gitea/modules/user" | ||||
| 	"code.gitea.io/gitea/modules/util" | ||||
| ) | ||||
|  | ||||
| // settings | ||||
| @@ -158,9 +159,11 @@ func loadCommonSettingsFrom(cfg ConfigProvider) error { | ||||
| func loadRunModeFrom(rootCfg ConfigProvider) { | ||||
| 	rootSec := rootCfg.Section("") | ||||
| 	RunUser = rootSec.Key("RUN_USER").MustString(user.CurrentUsername()) | ||||
|  | ||||
| 	// The following is a purposefully undocumented option. Please do not run Gitea as root. It will only cause future headaches. | ||||
| 	// Please don't use root as a bandaid to "fix" something that is broken, instead the broken thing should instead be fixed properly. | ||||
| 	unsafeAllowRunAsRoot := ConfigSectionKeyBool(rootSec, "I_AM_BEING_UNSAFE_RUNNING_AS_ROOT") | ||||
| 	unsafeAllowRunAsRoot = unsafeAllowRunAsRoot || util.OptionalBoolParse(os.Getenv("GITEA_I_AM_BEING_UNSAFE_RUNNING_AS_ROOT")).Value() | ||||
| 	RunMode = os.Getenv("GITEA_RUN_MODE") | ||||
| 	if RunMode == "" { | ||||
| 		RunMode = rootSec.Key("RUN_MODE").MustString("prod") | ||||
|   | ||||
		Reference in New Issue
	
	Block a user