fix perms

src/ahriman/application/handlers/setup.py

@@ -72,6 +72,7 @@ class Setup(Handler):
 
         application = Application(repository_id, configuration, report=report)
 
+        with application.repository.paths.preserve_owner():
             Setup.configuration_create_makepkg(args.packager, args.makeflags_jobs, application.repository.paths)
             Setup.executable_create(application.repository.paths, repository_id)
             repository_server = f"file://{application.repository.paths.repository}" if args.server is None else args.server
@@ -280,6 +281,5 @@ class Setup(Handler):
         command = Setup.build_command(paths.root, repository_id)
         command.unlink(missing_ok=True)
         command.symlink_to(Setup.ARCHBUILD_COMMAND_PATH)
-        paths.chown(command)  # we would like to keep owner inside ahriman's home
 
     arguments = [_set_service_setup_parser]

src/ahriman/core/alpm/pacman.py

@@ -130,8 +130,8 @@ class Pacman(LazyLogging):
             return  # database for some reason deos not exist
 
         self.logger.info("copy pacman database %s from operating system root to ahriman's home %s", src, dst)
+        with self.repository_paths.preserve_owner(dst.parent):
             shutil.copy(src, dst)
-        self.repository_paths.chown(dst)
 
     def database_init(self, handle: Handle, repository: str, architecture: str) -> DB:
         """

src/ahriman/core/database/sqlite.py

@@ -95,8 +95,8 @@ class SQLite(
         sqlite3.register_converter("json", json.loads)
 
         if self._configuration.getboolean("settings", "apply_migrations", fallback=True):
+            with self._repository_paths.preserve_owner():
                 self.with_connection(lambda connection: Migrations.migrate(connection, self._configuration))
-        self._repository_paths.chown(self.path)
 
     def package_clear(self, package_base: str, repository_id: RepositoryId | None = None) -> None:
         """

src/ahriman/models/repository_paths.py

@@ -17,6 +17,7 @@
 # You should have received a copy of the GNU General Public License
 # along with this program. If not, see <http://www.gnu.org/licenses/>.
 #
+import contextlib
 import os
 import shutil
 
@@ -221,22 +222,14 @@ class RepositoryPaths(LazyLogging):
         stat = path.stat()
         return stat.st_uid, stat.st_gid
 
-    def cache_for(self, package_base: str) -> Path:
+    def _chown(self, path: Path) -> None:
-        """
-        get path to cached PKGBUILD and package sources for the package base
-
-        Args:
-            package_base(str): package base name
-
-        Returns:
-            Path: full path to directory for specified package base cache
-        """
-        return self.cache / package_base
-
-    def chown(self, path: Path) -> None:
         """
         set owner of path recursively (from root) to root owner
 
+        Notes:
+            More likely you don't want to call this method explicitly, consider using :func:`preserve_owner`
+            as context manager
+
         Args:
             path(Path): path to be chown
 
@@ -256,6 +249,45 @@ class RepositoryPaths(LazyLogging):
             set_owner(path)
             path = path.parent
 
+    def cache_for(self, package_base: str) -> Path:
+        """
+        get path to cached PKGBUILD and package sources for the package base
+
+        Args:
+            package_base(str): package base name
+
+        Returns:
+            Path: full path to directory for specified package base cache
+        """
+        return self.cache / package_base
+
+    @contextlib.contextmanager
+    def preserve_owner(self, path: Path | None = None) -> Generator[None, None, None]:
+        """
+        perform any action preserving owner for any newly created file or directory
+
+        Args:
+            path(Path, optional): use this path as root instead of repository root (Default value = None)
+        """
+        path = path or self.root
+
+        def walk(root: Path) -> Generator[Path, None, None]:
+            for entry in root.iterdir():
+                yield entry
+                if entry in (self.chroot.parent,):
+                    yield from entry.iterdir()
+                elif entry.is_dir():
+                    yield from walk(entry)
+
+        # get current filesystem and run action
+        previous_snapshot = set(walk(path))
+        yield
+
+        # get newly created files and directories and chown them
+        new_entries = set(walk(path)).difference(previous_snapshot)
+        for entry in new_entries:
+            self._chown(entry)
+
     def tree_clear(self, package_base: str) -> None:
         """
         clear package specific files
@@ -274,6 +306,8 @@ class RepositoryPaths(LazyLogging):
         """
         if self.repository_id.is_empty:
             return  # do not even try to create tree in case if no repository id set
+
+        with self.preserve_owner():
             for directory in (
                     self.cache,
                     self.chroot,
@@ -282,4 +316,3 @@ class RepositoryPaths(LazyLogging):
                     self.repository,
             ):
                 directory.mkdir(mode=0o755, parents=True, exist_ok=True)
-            self.chown(directory)