The release tarball's files are now owned by root, not the user who built it

2026-10-21 16:07:21 +01:00
1 changed files with 2 additions and 0 deletions
@@ -70,7 +70,9 @@ if [[ $DO_RELEASE -eq 1 ]]; then
    install -DT -m 644 deploy/job-search.service $RELEASE_DIR/job-search.service
    install -DT -m 644 deploy/job-search.logrotate $RELEASE_DIR/job-search.logrotate
    ARCH=`dpkg --print-architecture`
+    # Owned by root (0:0), not the user who built it, with no names
    tar -czf $RELEASE_DIR/job-search-$VERSION-$ARCH.tar.gz \
+      --owner=0 --group=0 --numeric-owner \
      --transform "s,^$RELEASE_DIR/,job-search-$VERSION-$ARCH/," \
      $RELEASE_DIR/job-search $RELEASE_DIR/job-search.service \
      $RELEASE_DIR/job-search.logrotate