All scripts on pkgs02 are now run as pagure

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

roles/distgit/files/suexec-upload.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+exec sudo -E -u apache /var/lib/dist-git/web/upload.cgi

roles/distgit/tasks/main.yml

@@ -37,12 +37,16 @@
   tags:
   - distgit
 
-- name: Install suexec wrapper
+- name: Install suexec wrappers
   copy:
-    src=gitolite-suexec-wrapper.sh
+    src=suexec-{{item}}.sh
-    dest=/var/www/bin/gitolite-suexec-wrapper.sh
+    dest=/var/www/bin/suexec-{{item}}.sh
     owner=pagure
     group=packager
+    mode=0755
+  with_items:
+  - gitolite
+  - upload
   tags:
   - distgit
 

roles/distgit/templates/lookaside-upload.conf

@@ -45,7 +45,7 @@ Alias /robots.txt /var/www/robots-src.txt
 
 <VirtualHost _default_:443>
     # This alias must come before the /repo/ one to avoid being overridden.
-    ScriptAlias /repo/pkgs/upload.cgi /var/lib/dist-git/web/upload.cgi
+    ScriptAlias /repo/pkgs/upload.cgi /var/www/bin/suexec-upload.sh
 
     Alias /repo/ /srv/cache/lookaside/
     ServerName pkgs{{ env_suffix }}.fedoraproject.org