hito.git — [OCaml] High Intensity Training Online

fix Make setup.sh releases readable by hito

mktemp -d creates the staging directory with mode 0700, and the release keeps that mode after the move into releases/. The service now runs as hito rather than the owning git user, so systemd failed at CHDIR and the health check rolled current back. Open the release directory to 0755. The post-receive hook was not affected.

Commit: c656b67952ffb74d1df12d4161335ad3eb44dae6
Author: Marius Peter <dev@marius-peter.com>
Author date: 2026-10-01 12:28:52 +02:00
Committer: Marius Peter <dev@marius-peter.com>
Committer date: 2026-10-01 12:28:52 +02:00

deploy/setup.sh

index 039a3179..a2d8d7b4 100755..100755

@@ -193,6 +193,8 @@

                
                  mkdir -p "${RELEASES}"
              
                  chown "${SVC_USER}:${SVC_GROUP}" "${RELEASES}"
              
                  mv "${stage}" "${rel}"
              
                +
                Added: 
                  # mktemp -d creates 0700; the runtime user must be able to enter the release.
              
                +
                Added: 
                  chmod 0755 "${rel}"
              
                  ln -sfn "${DB}" "${rel}/hito.sqlite"
              
                  subject="$(git --git-dir="${BARE}" log -1 --format=%s "${sha}")"