Commcare HQ deploy failing - fatal: transport 'file' not allowed with git clone

I'm receiving an error while updating an existing CCHQ instance.
The full logs are here:

(cchq) ccc@monolith:~/commcare-cloud$ cchq monolith deploy --commcare-rev 7828d2446dc62d945e4a86cce56c243edfa27130
/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/ansible/parsing/vault/__init__.py:44: CryptographyDeprecationWarning: Python 3.6 is no longer
 supported by the Python core team. Therefore, support for it is deprecated in cryptography and will be removed in a future release.
  from cryptography.exceptions import InvalidSignature
Whoa there bud! You're deploying non-default.
'commcare' repo: master != 7828d2446dc62d945e4a86cce56c243edfa27130
ARE YOU DOING SOMETHING EXCEPTIONAL THAT WARRANTS THIS? [y/N]y
[10.1.0.4] Executing task '_task'
[10.1.0.4] run: git rev-parse HEAD
[10.1.0.4] out: fatal: detected dubious ownership in repository at '/home/cchq/www/monolith/releases/2022-09-25_17.31'
[10.1.0.4] out: To add an exception for this directory, call:
[10.1.0.4] out:
[10.1.0.4] out:         git config --global --add safe.directory /home/cchq/www/monolith/releases/2022-09-25_17.31
[10.1.0.4] out:


Warning: run() received nonzero return code 128 while executing 'git rev-parse HEAD'!

Diff generation skipped. Supply a Github token to see deploy diffs.
New version details:
    Branch deployed     : commcare: 7828d2446dc62d945e4a86cce56c243edfa27130


Here's the complete diff on github: https://github.com/dimagi/commcare-hq/compare/fatal: detected dubious ownership in repository at '/home/cchq/www/
monolith/releases/2022-09-25_17.31'
To add an exception for this directory, call:

        git config --global --add safe.directory /home/cchq/www/monolith/releases/2022-09-25_17.31...7828d2446dc62d945e4a86cce56c243edfa27130
Are you sure you want to preindex and deploy to monolith? [y/N]y
Vault Password for 'monolith':
>> Sending email: ATTENTION: ccc has initiated a CommCare HQ deploy to monolith with non-default branch '7828d2446dc62d945e4a86cce56c243edfa27130'
Ubuntu 18.04.6 LTS
Connection to 10.1.0.4 closed.
commcare-cloud monolith fab deploy_commcare --set code_branch=7828d2446dc62d945e4a86cce56c243edfa27130 --branch master
patched-fab -f /home/ccc/commcare-cloud/src/commcare_cloud/fabfile.py monolith deploy_commcare --set code_branch=7828d2446dc62d945e4a86cce56c243edfa2
7130 --disable-known-hosts --system-known-hosts /home/ccc/environments/monolith/known_hosts
/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/paramiko/transport.py:33: CryptographyDeprecationWarning: Python 3.6 is no longer supported b
y the Python core team. Therefore, support for it is deprecated in cryptography and will be removed in a future release.
  from cryptography.hazmat.backends import default_backend
Using commcare-hq branch 7828d2446dc62d945e4a86cce56c243edfa27130
[10.1.0.4] Executing task 'deploy_commcare'
[10.1.0.4] Executing task '_setup_release'
[10.1.0.4] Executing task 'create'
[10.1.0.4] sudo: mkdir -p /home/cchq/www/monolith/releases/2022-10-29_18.36
[10.1.0.4] Executing task 'update'
[10.1.0.4] sudo: git submodule foreach "git fetch origin"
[10.1.0.4] out: Entering 'corehq/apps/hqmedia/static/hqmedia/MediaUploader'
[10.1.0.4] out: Entering 'submodules/commcare-translations'
[10.1.0.4] out: Entering 'submodules/couchdbkit-aggregate'
[10.1.0.4] out: Entering 'submodules/django-digest-src'
[10.1.0.4] out: Entering 'submodules/django-no-exceptions'
[10.1.0.4] out: Entering 'submodules/langcodes'
[10.1.0.4] out: Entering 'submodules/python-digest'
[10.1.0.4] out: Entering 'submodules/xml2json'
[10.1.0.4] out:

[10.1.0.4] sudo: git submodule | awk '{ print $2 }'
[10.1.0.4] out: corehq/apps/hqmedia/static/hqmedia/MediaUploader
[10.1.0.4] out: submodules/commcare-translations
[10.1.0.4] out: submodules/couchdbkit-aggregate
[10.1.0.4] out: submodules/django-digest-src
[10.1.0.4] out: submodules/django-no-exceptions
[10.1.0.4] out: submodules/langcodes
[10.1.0.4] out: submodules/python-digest
[10.1.0.4] out: submodules/xml2json
[10.1.0.4] out:

[10.1.0.4] sudo: git submodule | awk '{ print $2 }'
[10.1.0.4] out: corehq/apps/hqmedia/static/hqmedia/MediaUploader
[10.1.0.4] out: submodules/commcare-translations
[10.1.0.4] out: submodules/couchdbkit-aggregate
[10.1.0.4] out: submodules/django-digest-src
[10.1.0.4] out: submodules/django-no-exceptions
[10.1.0.4] out: submodules/langcodes
[10.1.0.4] out: submodules/python-digest
[10.1.0.4] out: submodules/xml2json
[10.1.0.4] out:

[10.1.0.4] sudo: git config submodule.corehq/apps/hqmedia/static/hqmedia/MediaUploader.url
[10.1.0.4] out: https://github.com/dimagi/MediaUploader.git
[10.1.0.4] out:

[10.1.0.4] sudo: git config submodule.submodules/commcare-translations.url
[10.1.0.4] out: https://github.com/dimagi/commcare-translations.git
[10.1.0.4] out:

[10.1.0.4] sudo: git config submodule.submodules/couchdbkit-aggregate.url
[10.1.0.4] out: https://github.com/dimagi/couchdbkit-aggregate.git
[10.1.0.4] out:

[10.1.0.4] sudo: git config submodule.submodules/django-digest-src.url
[10.1.0.4] out: https://github.com/dimagi/django-digest.git
[10.1.0.4] out:

[10.1.0.4] sudo: git config submodule.submodules/django-no-exceptions.url
[10.1.0.4] out: https://github.com/dimagi/django-no-exceptions.git
[10.1.0.4] out:

[10.1.0.4] sudo: git config submodule.submodules/langcodes.url
[10.1.0.4] out: https://github.com/dimagi/langcodes.git
[10.1.0.4] out:

[10.1.0.4] sudo: git config submodule.submodules/python-digest.url
[10.1.0.4] out: https://github.com/dimagi/python-digest.git
[10.1.0.4] out:

[10.1.0.4] sudo: git config submodule.submodules/xml2json.url
[10.1.0.4] out: https://github.com/dimagi/xml2json.git
[10.1.0.4] out:

[10.1.0.4] sudo: git clone /home/cchq/www/monolith/current/.git /home/cchq/www/monolith/releases/2022-10-29_18.36
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36'...
[10.1.0.4] out: done.
[10.1.0.4] out: Note: switching to '5ed5c54aa4880bf0010a4001aa8693b979802e13'.
[10.1.0.4] out:
[10.1.0.4] out: You are in 'detached HEAD' state. You can look around, make experimental
[10.1.0.4] out: changes and commit them, and you can discard any commits you make in this
[10.1.0.4] out: state without impacting any branches by switching back to a branch.
[10.1.0.4] out:
[10.1.0.4] out: If you want to create a new branch to retain commits you create, you may
[10.1.0.4] out: do so (now or later) by using -c with the switch command. Example:
[10.1.0.4] out:
[10.1.0.4] out:   git switch -c <new-branch-name>
[10.1.0.4] out:
[10.1.0.4] out: Or undo this operation with:
[10.1.0.4] out:
[10.1.0.4] out:   git switch -
[10.1.0.4] out:
[10.1.0.4] out: Turn off this advice by setting config variable advice.detachedHead to false
[10.1.0.4] out:
[10.1.0.4] out:

[10.1.0.4] sudo: git config receive.denyCurrentBranch updateInstead
[10.1.0.4] sudo: git config submodule.corehq/apps/hqmedia/static/hqmedia/MediaUploader.url /home/cchq/www/monolith/current/.git/modules/corehq/apps/h
qmedia/static/hqmedia/MediaUploader && git config submodule.submodules/commcare-translations.url /home/cchq/www/monolith/current/.git/modules/submodu
les/commcare-translations && git config submodule.submodules/couchdbkit-aggregate.url /home/cchq/www/monolith/current/.git/modules/submodules/couchdb
kit-aggregate && git config submodule.submodules/django-digest-src.url /home/cchq/www/monolith/current/.git/modules/submodules/django-digest-src && g
it config submodule.submodules/django-no-exceptions.url /home/cchq/www/monolith/current/.git/modules/submodules/django-no-exceptions && git config su
bmodule.submodules/langcodes.url /home/cchq/www/monolith/current/.git/modules/submodules/langcodes && git config submodule.submodules/python-digest.u
rl /home/cchq/www/monolith/current/.git/modules/submodules/python-digest && git config submodule.submodules/xml2json.url /home/cchq/www/monolith/curr
ent/.git/modules/submodules/xml2json
[10.1.0.4] sudo: git submodule update --init --recursive
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/corehq/apps/hqmedia/static/hqmedia/MediaUploader'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/corehq/apps/hqmedia/static/hqmedia/MediaUploader' into submodule path '
/home/cchq/www/monolith/releases/2022-10-29_18.36/corehq/apps/hqmedia/static/hqmedia/MediaUploader' failed
[10.1.0.4] out: Failed to clone 'corehq/apps/hqmedia/static/hqmedia/MediaUploader'. Retry scheduled
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/submodules/commcare-translations'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/submodules/commcare-translations' into submodule path '/home/cchq/www/m
onolith/releases/2022-10-29_18.36/submodules/commcare-translations' failed
[10.1.0.4] out: Failed to clone 'submodules/commcare-translations'. Retry scheduled
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/submodules/couchdbkit-aggregate'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/submodules/couchdbkit-aggregate' into submodule path '/home/cchq/www/mo
nolith/releases/2022-10-29_18.36/submodules/couchdbkit-aggregate' failed
[10.1.0.4] out: Failed to clone 'submodules/couchdbkit-aggregate'. Retry scheduled
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/submodules/django-digest-src'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/submodules/django-digest-src' into submodule path '/home/cchq/www/monol
ith/releases/2022-10-29_18.36/submodules/django-digest-src' failed
[10.1.0.4] out: Failed to clone 'submodules/django-digest-src'. Retry scheduled
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/submodules/django-no-exceptions'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/submodules/django-no-exceptions' into submodule path '/home/cchq/www/mo
nolith/releases/2022-10-29_18.36/submodules/django-no-exceptions' failed
[10.1.0.4] out: Failed to clone 'submodules/django-no-exceptions'. Retry scheduled
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/submodules/langcodes'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/submodules/langcodes' into submodule path '/home/cchq/www/monolith/rele
ases/2022-10-29_18.36/submodules/langcodes' failed
[10.1.0.4] out: Failed to clone 'submodules/langcodes'. Retry scheduled
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/submodules/python-digest'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/submodules/python-digest' into submodule path '/home/cchq/www/monolith/
releases/2022-10-29_18.36/submodules/python-digest' failed
[10.1.0.4] out: Failed to clone 'submodules/python-digest'. Retry scheduled
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/submodules/xml2json'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/submodules/xml2json' into submodule path '/home/cchq/www/monolith/relea
ses/2022-10-29_18.36/submodules/xml2json' failed
[10.1.0.4] out: Failed to clone 'submodules/xml2json'. Retry scheduled
[10.1.0.4] out: Cloning into '/home/cchq/www/monolith/releases/2022-10-29_18.36/corehq/apps/hqmedia/static/hqmedia/MediaUploader'...
[10.1.0.4] out: fatal: transport 'file' not allowed
[10.1.0.4] out: fatal: clone of '/home/cchq/www/monolith/current/.git/modules/corehq/apps/hqmedia/static/hqmedia/MediaUploader' into submodule path '
/home/cchq/www/monolith/releases/2022-10-29_18.36/corehq/apps/hqmedia/static/hqmedia/MediaUploader' failed
[10.1.0.4] out: Failed to clone 'corehq/apps/hqmedia/static/hqmedia/MediaUploader' a second time, aborting
[10.1.0.4] out:


Fatal error: sudo() received nonzero return code 1 while executing!

Requested: git submodule update --init --recursive
Executed: sudo -S -p 'sudo password:' -H  -u "cchq"  /bin/bash -l -c "cd /home/cchq/www/monolith/releases/2022-10-29_18.36 >/dev/null && git submodul
e update --init --recursive"

Aborting.
!!! Parallel execution exception under host '10.1.0.4':
Process 10.1.0.4:
Traceback (most recent call last):
  File "/usr/lib/python3.6/multiprocessing/process.py", line 258, in _bootstrap
    self.run()
  File "/usr/lib/python3.6/multiprocessing/process.py", line 93, in run
    self._target(*self._args, **self._kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 240, in inner
    submit(task.run(*args, **kwargs))
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 172, in run
    return self.wrapped(*args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/decorators.py", line 52, in inner_decorator
    return func(*args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/decorators.py", line 180, in inner
    return func(*args, **kwargs)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/operations/release.py", line 45, in update
    _update_code_from_previous_release(code_repo, subdir, git_env)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/operations/release.py", line 73, in _update_code_from_previous_release
    _clone_code_from_local_path(code_current, code_root)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/operations/release.py", line 137, in _clone_code_from_local_path
    cmd_fn('git submodule update --init --recursive')
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/network.py", line 654, in host_prompting_wrapper
    return func(*args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/operations.py", line 1121, in sudo
    stderr=stderr, timeout=timeout, shell_escape=shell_escape,
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/operations.py", line 952, in _run_command
    error(message=msg, stdout=out, stderr=err)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/utils.py", line 359, in error
    return func(message)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/utils.py", line 55, in abort
    raise env.abort_exception(msg)
Exception: sudo() received nonzero return code 1 while executing!

Requested: git submodule update --init --recursive
Executed: sudo -S -p 'sudo password:' -H  -u "cchq"  /bin/bash -l -c "cd /home/cchq/www/monolith/releases/2022-10-29_18.36 >/dev/null && git submodul
e update --init --recursive"

Fatal error: One or more hosts failed while executing task 'update'

Underlying exception:
    sudo() received nonzero return code 1 while executing!

    Requested: git submodule update --init --recursive
    Executed: sudo -S -p 'sudo password:' -H  -u "cchq"  /bin/bash -l -c "cd /home/cchq/www/monolith/releases/2022-10-29_18.36 >/dev/null && git subm
odule update --init --recursive"

Aborting.
[10.1.0.4] Executing task 'send_email'
[10.1.0.4] sudo: /home/cchq/www/monolith/releases/2022-10-29_18.36/python_env/bin/python manage.py send_email --to-admins --subject 'Deploy to monoli
th failed. Try resuming with fab monolith deploy:resume=yes.' 'Traceback:
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py", line 393, in _deploy_without_asking
    deploy_checkpoint(index, command.__name__, execute_with_timing, command)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py", line 386, in deploy_checkpoint
    fn(*args, **kwargs)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/utils.py", line 25, in execute_with_timing
    execute(fn, *args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 385, in execute
    multiprocessing
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 275, in _execute
    return task.run(*args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 172, in run
    return self.wrapped(*args, **kwargs)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py", line 317, in _setup_release
    execute_with_timing(update_code, env.deploy_ref)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/utils.py", line 25, in execute_with_timing
    execute(fn, *args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 417, in execute
    error(err, exception=d['"'"'results'"'"'])
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/utils.py", line 359, in error
    return func(message)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/utils.py", line 55, in abort
    raise env.abort_exception(msg)
Exception: One or more hosts failed while executing task '"'"'update'"'"'

Underlying exception:
    sudo() received nonzero return code 1 while executing!

    Requested: git submodule update --init --recursive
    Executed: sudo -S -p '"'"'sudo password:'"'"' -H  -u "cchq"  /bin/bash -l -c "cd /home/cchq/www/monolith/releases/2022-10-29_18.36 >/dev/null &&
git submodule update --init --recursive"'
[10.1.0.4] out: /bin/bash: /home/cchq/www/monolith/releases/2022-10-29_18.36/python_env/bin/python: No such file or directory
[10.1.0.4] out:


Fatal error: sudo() received nonzero return code 127 while executing!

Requested: /home/cchq/www/monolith/releases/2022-10-29_18.36/python_env/bin/python manage.py send_email --to-admins --subject 'Deploy to monolith fai
led. Try resuming with fab monolith deploy:resume=yes.' 'Traceback:
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py", line 393, in _deploy_without_asking
    deploy_checkpoint(index, command.__name__, execute_with_timing, command)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py", line 386, in deploy_checkpoint
    fn(*args, **kwargs)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/utils.py", line 25, in execute_with_timing
    execute(fn, *args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 385, in execute
    multiprocessing
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 275, in _execute
    return task.run(*args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 172, in run
    return self.wrapped(*args, **kwargs)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py", line 317, in _setup_release
    execute_with_timing(update_code, env.deploy_ref)
  File "/home/ccc/commcare-cloud/src/commcare_cloud/fab/utils.py", line 25, in execute_with_timing
    execute(fn, *args, **kwargs)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py", line 417, in execute
    error(err, exception=d['"'"'results'"'"'])
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/utils.py", line 359, in error
    return func(message)
  File "/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/utils.py", line 55, in abort
    raise env.abort_exception(msg)
Exception: One or more hosts failed while executing task '"'"'update'"'"'

Underlying exception:
    sudo() received nonzero return code 1 while executing!

    Requested: git submodule update --init --recursive
    Executed: sudo -S -p '"'"'sudo password:'"'"' -H  -u "cchq"  /bin/bash -l -c "cd /home/cchq/www/monolith/releases/2022-10-29_18.36 >/dev/null && g
it submodule update --init --recursive"'
Executed: sudo -S -p 'sudo password:' -H  -u "cchq"  /bin/bash -l -c "cd /home/cchq/www/monolith/releases/2022-10-29_18.36 >/dev/null && /home/cchq/ww
w/monolith/releases/2022-10-29_18.36/python_env/bin/python manage.py send_email --to-admins --subject 'Deploy to monolith failed. Try resuming with fa
b monolith deploy:resume=yes.' 'Traceback:
  File \"/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py\", line 393, in _deploy_without_asking
    deploy_checkpoint(index, command.__name__, execute_with_timing, command)
  File \"/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py\", line 386, in deploy_checkpoint
    fn(*args, **kwargs)
  File \"/home/ccc/commcare-cloud/src/commcare_cloud/fab/utils.py\", line 25, in execute_with_timing
    execute(fn, *args, **kwargs)
  File \"/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py\", line 385, in execute
    multiprocessing
  File \"/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py\", line 275, in _execute
    return task.run(*args, **kwargs)
  File \"/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py\", line 172, in run
    return self.wrapped(*args, **kwargs)
  File \"/home/ccc/commcare-cloud/src/commcare_cloud/fab/fabfile.py\", line 317, in _setup_release
    execute_with_timing(update_code, env.deploy_ref)
  File \"/home/ccc/commcare-cloud/src/commcare_cloud/fab/utils.py\", line 25, in execute_with_timing
    execute(fn, *args, **kwargs)
  File \"/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/tasks.py\", line 417, in execute
    error(err, exception=d['\"'\"'results'\"'\"'])
  File \"/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/utils.py\", line 359, in error
    return func(message)
  File \"/home/ccc/.virtualenvs/cchq/lib/python3.6/site-packages/fabric/utils.py\", line 55, in abort
    raise env.abort_exception(msg)
Exception: One or more hosts failed while executing task '\"'\"'update'\"'\"'

Underlying exception:
    sudo() received nonzero return code 1 while executing!
    Requested: git submodule update --init --recursive
    Executed: sudo -S -p '\"'\"'sudo password:'\"'\"' -H  -u \"cchq\"  /bin/bash -l -c \"cd /home/cchq/www/monolith/releases/2022-10-29_18.36 >/dev/null && git submodule update --init --recursive\"'"
Disconnecting from 10.1.0.4... done.
>> Sending email: CommCare HQ deploy to monolith failed
Ubuntu 18.04.6 LTS
Connection to 10.1.0.4 closed.
Skipping formplayer because commcare failed

I assume from the below this relates to the latest Github CVE.
https://twitter.com/jpetazzo/status/1583112279012257797

Is there something I should be doing to deploy the latest? Would reverting to an earlier git client perhaps solve this?

Thanks!

@erobinson I believe a fix was applied for this. is it still an issue for you ?

Hi @schauhan yes it is - I just double checked to ensure I'd run an update-code prior to deploying and it seems I did. GIT log shows:

commit dc1612c3b6e27b62df98b918de4790d874a08743 (HEAD -> master, origin/master, origin/HEAD)
Merge: d847f2766 1321f76ed
Author: shyamkumarlchauhan <58246626+shyamkumarlchauhan@users.noreply.github.com>
Date:   Sat Oct 29 13:06:44 2022 +0530

    Merge pull request #5550 from dimagi/sc/postgres-upgrade-production

    postgres upgrade on production

After the update-code I opened a new tmux session to run the deploy, otherwise it was business as usual. I was deploying HQ commit 7828d2446dc62d945e4a86cce56c243edfa27130

I will be attempting this again over the coming weekend but I may have an opportunity to test on my QA server during the week.

Hey Ed,

I am sorry for the confusion. The changes in the pull request that Shyam linked need to be applied manually in order to update git settings. You can either apply the whole commcarehq role with cchq <env> ap deploy_commcarehq.yml or manually apply just the config change with cchq <env> run-shell-command webworkers,celery,pillowtop 'git config --global protocol.file.allow always' --become-user <cchq_user>.

Cal

1 Like

Ah awesome, thanks @cellowitz I'll let you know how that goes. Makes sense.
Ed

All appeared to go well with the deploy, thank you!