人生在世，看得透，又看得远者prevail everywhere.

git@example.com:/var/git/repos/group/project/repo.git
# 不需要单独再设立一个git组，只需要uid即可
$ useradd git -g nogroup
/opt/git
  .ssh
    authorized_keys
  repos
    ...
command="/path/to/git-shell",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty ssh-rsa ...
#!/usr/bin/python3
# -*- coding: utf-8 -*-
import os
import re
import shlex
import sys
import subprocess

def main():

    # 这里的 SSH_ORIGINAL_COMMAND 内容便是原始调用的远程命令

    command_line = os.environ.get('SSH_ORIGINAL_COMMAND')

    try:
        shell(command_line)
    except Exception as e:
        print('', file=sys.stderr)
        print(e, file=sys.stderr)
        print('', file=sys.stderr)

def shell(command_line):
    if not command_line:
        raise ValueError('No command line provided')

    args = shlex.split(command_line)
    command = args[0]

    repos_root = '/opt/git/repos'

    print(args, file=sys.stderr)

    # 仅允许这三个命令
    if command in {'git-receive-pack', 'git-upload-pack',
'git-upload-archive'}:

        # 去除路径末尾的 .git
        args[1] = re.sub(r'\/+', '/',
                         '{}/{}.git'.format(repos_root,
args[1].replace('.git', '')))

        print(args, file=sys.stderr)

        if not os.path.isdir(args[1]):
     # 如果是一个新仓库，先初始化
            init_git_repo(args[1])

        print(args, file=sys.stderr)

        os.execvp(command, args)

def init_git_repo(repo_dir):
    os.makedirs(repo_dir)
    p = subprocess.Popen('git init --bare', stdout=subprocess.PIPE,
                         stderr=subprocess.PIPE, cwd=repo_dir, shell=True)
    stdout, stderr = p.communicate()
    export_daemon_ok(repo_dir)

def export_daemon_ok(repo_dir):

    # 这个文件为 git 协议访问作准备
    _f = os.path.join(repo_dir, 'git-daemon-export-ok')
    with open(_f, 'a') as f:
        os.utime(_f)

if __name__ == '__main__':
    sys.exit(main())
$ /etc/init.d/git-daemon
$ rc-update add git-daemon
$ git clone git://your.host.name/path/to/repo.git
$ emerge -v www-apps/cgit
### /etc/cgitrc

scan-path=/opt/git/repos
virtual-root=/
### /etc/nginx/conf.d/cgit.conf
server {
    listen 80;
    server_name git.your.host.name;

    root /usr/share/webapps/cgit/0.10.1/htdocs;

    location ~* ^.+(cgit.(css|png)|favicon.ico|robots.txt) {
        root /usr/share/webapps/cgit/0.10.1/htdocs;
    }

    location / {
        try_files $uri @cgit;
    }

    location @cgit {
        gzip off;
        include uwsgi_params;
        uwsgi_modifier1 9;
        uwsgi_pass unix:/var/run/uwsgi_cgit.sock;
    }
}
# SSH协议
ssh://your.host.name/path/to/repo.git

# Git协议
git://your.host.name/path/to/repo.git

# 查看cgit
http://cgit.your.host.name/
git clone https://git.zx2c4.com/cgit
cd cgit
make get-git
make
make install

rm /etc/cgitrc
ln -s /home/git/.gitolite/local/cgitrc /etc/cgitrc

enable-git-config=1
enable-gitweb-owner=1
remove-suffix=1
project-list=/home/git/projects.list
scan-path=/home/git/repositories/

repo testing
    RW+     =   @all
    R           =   gitweb
    desc = For testing purpose.
    owner = Jian Zhou
    config cgit.clone-url = clone-url

21c21
<     UMASK                           =>  0077,
---
>     UMASK                           =>  0027,
24c24
<     GIT_CONFIG_KEYS                 =>  '',
---
>     GIT_CONFIG_KEYS                 =>  '.*',

chmod -R g+rX repositories

usermod -aG git www-data

max-repo-count=50
# Enable caching of up to 1000 output entries
cache-size=1000
section-from-path=1
virtual-root=/

cache-root=/root/cache/cgit

# Specify some default clone urls using macro expansion
#clone-url=git://foo.org/$CGIT_REPO_URL git@foo.org:$CGIT_REPO_URL

# Specify the css url
css=/cgit.css

# Show owner on index page
enable-index-owner=1

# Allow http transport git clone
enable-http-clone=1

# Show extra links for each repository on the index page
enable-index-links=1

# Enable blame page and create links to it from tree page
enable-blame=1

# Enable ASCII art commit history graph on the log pages
enable-commit-graph=1

# Show number of affected files per commit on the log pages
enable-log-filecount=1

# Show number of added/removed lines per commit on the log pages
enable-log-linecount=1

# Sort branches by date
branch-sort=age

# Add a cgit favicon
favicon=/favicon.ico

# Use a custom logo
logo=/cgit.png

# Enable statistics per week, month and quarter
max-stats=quarter

# Set the title and heading of the repository index page
root-title=Kule Yang's privete git repositories

# Set a subheading for the repository index page
root-desc=tracking the foobar development

# Include some more info about example.com on the index page
root-readme=/var/www/htdocs/about.html

# Allow download of tar.gz, tar.bz2 and zip-files
snapshots=tar.gz tar.bz2 zip

##
## List of common mimetypes
##

mimetype.gif=image/gif
mimetype.html=text/html
mimetype.jpg=image/jpeg
mimetype.jpeg=image/jpeg
mimetype.pdf=application/pdf
mimetype.png=image/png
mimetype.svg=image/svg+xml

# Highlight source code with python pygments-based highlighter
source-filter=/usr/local/lib/cgit/filters/syntax-highlighting.py

# Format markdown, restructuredtext, manpages, text files, and html files
# through the right converters
about-filter=/usr/local/lib/cgit/filters/about-formatting.sh

##
## Search for these files in the root of the default branch of repositories
## for coming up with the about page:
##
readme=:README.md
readme=:readme.md
readme=:README.mkd
readme=:readme.mkd
readme=:README.rst
readme=:readme.rst
readme=:README.html
readme=:readme.html
readme=:README.htm
readme=:readme.htm
readme=:README.txt
readme=:readme.txt
readme=:README
readme=:readme
readme=:INSTALL.md
readme=:install.md
readme=:INSTALL.mkd
readme=:install.mkd
readme=:INSTALL.rst
readme=:install.rst
readme=:INSTALL.html
readme=:install.html
readme=:INSTALL.htm
readme=:install.htm
readme=:INSTALL.txt
readme=:install.txt
readme=:INSTALL
readme=:install

##
## List of repositories.
## PS: Any repositories listed when section is unset will not be
##     displayed under a section heading
## PPS: This list could be kept in a different file (e.g. '/etc/cgitrepos')
##      and included like this:
##        include=/etc/cgitrepos
##

enable-git-config=1
enable-gitweb-owner=1
remove-suffix=0
project-list=/home/git/projects.list
scan-path=/home/git/repositories/

# repo.url=foo
# repo.path=/pub/git/foo.git
# repo.desc=the master foo repository
# repo.owner=fooman@example.com
# repo.readme=info/web/about.html
#
#
# repo.url=bar
# repo.path=/pub/git/bar.git
# repo.desc=the bars for your foo
# repo.owner=barman@example.com
# repo.readme=info/web/about.html

# The next repositories will be displayed under the 'extras' heading
# section=extras
#
#
# repo.url=baz
# repo.path=/pub/git/baz.git
# repo.desc=a set of extensions for bar users
#
# repo.url=wiz
# repo.path=/pub/git/wiz.git
# repo.desc=the wizard of foo

# Add some mirrored repositories
# section=mirrors
#
#
# repo.url=git
# repo.path=/pub/git/git.git
# repo.desc=the dscm
#
#
# repo.url=linux
# repo.path=/pub/git/linux.git
# repo.desc=the kernel

# Disable adhoc downloads of this repo
# repo.snapshots=0

# Disable line-counts for this repo
# repo.enable-log-linecount=0

# Restrict the max statistics period for this repo
# repo.max-stats=month

人生在世，看得透，又看得远者prevail everywhere.

Total Pageviews

Sunday 28 August 2016

可自己搭建的github.com的替代品cgit

cgit Quick Facts

Features

Source Code

搭建私用Git仓库

原理

实现思路

准备工作

搭建与维护

authorized_keys的写法

编写git-shell

git协议访问

搭建cgit与web服务器

测试访问

其他方案

安装配置Cgit

安装Cgit

合并gitolite-admin.git 和 cgitrc

使Cgit显示Gitolite库

配置`local/cgitrc`

设置库属性

设置权限