Merge "Avoid insecure umask which breaks loading of ansible.cfg"

playbooks/tripleo-ci/run-v3.yaml

@@ -24,14 +24,23 @@
         path: '{{ workspace }}/logs'
         state: directory
 
-    - name: Hard link tripleo-ci to openstack namespace dir
+    - name: Assure src folder has safe permissions
+      # Workaround for https://bugs.launchpad.net/tripleo/+bug/1807703
+      file:
+        path: /home/zuul/src/
+        state: directory
+        mode: u=rwX,g=rX,o=rX
+        recurse: yes
+
+    - name: Copy tripleo-ci to openstack namespace dir
       shell:
         cmd: |
           set -e
           set -x
           # we still need all the repos under the same root directory, but instead of using
           # zuul-cloner, use the wrapped commands directly
-          cp -dRl /home/zuul/src/git.openstack.org/openstack-infra/tripleo-ci .
+          # reflink is an safer alternative to hardlinking which could fail
+          cp -dR --reflink=auto /home/zuul/src/git.openstack.org/openstack-infra/tripleo-ci .
         executable: /bin/bash
         chdir: '{{ tripleo_root }}'
       environment: '{{ zuul | zuul_legacy_vars }}'