aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* fixed up several broken URLs (minor but annoying)Sitaram Chamarty2023-07-146-10/+10
|
* save-push-signatures: use refs/meta/push-certs instead of refs/push-certsRobin H. Johnson2023-05-021-3/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Historically, this hook put the certs in a ref named refs/push-certs. However, git does *NOT* replicate single-level refs, and this meant that gitolite mirroring did not replicate the push-certs! Trying to push them explicitly causes this error: ``` remote: error: refusing to create funny ref 'refs/push-certs' remotely ``` Upstream Git has good reasons as to why not to replicate single-level refs: https://lore.kernel.org/git/robbat2-20211115T063838-612792475Z@orbis-terrarum.net/ As a good-enough solution, use the namespace of meta/ for the refs. This is already used in other systems: - kernel.org refs/meta/cgit - gerrit refs/meta/config - GitBlit reflog: refs/meta/gitblit https://www.gitblit.com/administration.html#H12 - cc-utils refs/meta/ci - JGit refs/meta/push-certs https://www.ibm.com/docs/en/radfws/9.6.1?topic=SSRTLW_9.6.1/org.eclipse.egit.doc/help/JGit/New_and_Noteworthy/4.1/4.1.htm To migrate from old to new, for each repo, you must explicitly run: git update-ref refs/meta/push-certs refs/push-certs Then the hook will populate both refs. You can remove the old ref after that: git update-ref -d refs/push-certs Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* Update ukm for modern perlNick2021-02-121-1/+1
| | | | | | | | | | | | | | | | | | | | | with perl 5.32.0 trying to use ukm gives: ``` $ ssh gitolite@localhost ukm Enter passphrase for key '/home/kousu/.ssh/id_rsa': FATAL: Can't use global $_ in "my" at /usr/lib/gitolite/commands/ukm line 296, near "($_" Execution of /usr/lib/gitolite/commands/ukm aborted due to compilation errors. ``` This fixes it ``` $ ssh gitolite@localhost ukm list Enter passphrase for key '/home/kousu/.ssh/id_rsa': Hello alice, you manage the following keys: fingerprint userid keyid SHA256:VxHhqhOq5GxpPPUrYMeFMly4Mdc3YlP40qkLX4gr5fI alice alice ```
* gitolite mirroring terminology changesSitaram Chamarty2020-08-041-8/+8
| | | | | | | | | | | | | | | | | | | | | | | This affects the mirroring code and documentation: "slave"/"slaves" are now "copy"/"copies". Backward compatibility should be maintained; you do not need to change either your gitolite.conf, or any scripts you have written on top, until you are ready to do so. (This in turn means the word "slave" will still be present in the code, though only just as much as needed.) Should you wish to make this change, you need to migrate to the latest version (which is also tagged as 3.6.12, so if you want to wait till the distros pick it up wait for that), and then: - In the gitolite.conf file, change `option mirror.slaves` to `option mirror.copies`. - If you have any scripts that use the `gitolite mirror list slaves` command, change to `gitolite mirror list copies`. sitaram
* testconf: allow picking up a custom rc file if availableSitaram Chamarty2018-11-221-0/+11
|
* compile-1 no longer needs existing repo of existing gl-confSitaram Chamarty2017-10-141-87/+77
|
* vim syntax and indent files...Sitaram Chamarty2017-10-052-0/+143
| | | | | | | | | with the new "template-data" section, it becomes important to be able to visually know if you're entering something in the wrong section (template stuff outside the begin/end markers, or normal stuff inside). (unfortunately I only know vim; maybe others can help with other editors' setups?)
* "these are not the droids you are looking for"Sitaram Chamarty2017-09-291-0/+149
|
* Use https:// instead of insecure git:// protocolTill Maas2017-08-042-2/+2
| | | | | | Signed-off-by: Till Maas <opensource@till.name> (with minor whitespace changes by sitaramc@gmail.com)
* add example PRE_GIT code for blocking access (IP-check)Sitaram Chamarty2017-06-101-0/+43
|
* new 'skip_block' sugar, and 'testconf' feature using itSitaram Chamarty2017-04-151-0/+119
|
* ukm: use new ssh fingerprint functions.Robin H. Johnson2016-01-191-4/+4
| | | | | | UKM was never updated for new-style fingerprints at all. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
* Add script to pull and sanitize Active Directory user groupsJonathan Gray2015-10-091-0/+40
|
* Add documentation for using Active Directory authentication via ApacheJonathan Gray2015-10-091-0/+47
|
* contrib: redmine user aliasgitolite tester2015-06-061-0/+55
|
* fixups to the "save-push-signatures" programSitaram Chamarty2015-01-011-13/+16
| | | | | | | | | | | | | (both thanks to Junio's review) - detect/discard replayed certs in handling 'git push --signed' - make the commit message also contain the blob. It's kinda redundant to have it in both the commit message *and* the individual files, but is easier to process in terms of checking the entire cert chain. links to threads: https://groups.google.com/forum/#!topic/gitolite/7cSrU6JorEY http://article.gmane.org/gmane.comp.version-control.git/261928
* help with 'git push --signed'Sitaram Chamarty2014-12-291-0/+185
|
* allow gitolite.conf to be tested locally!Sitaram Chamarty2014-09-101-0/+136
| | | | please see documentation in the code
* mirroring to arbitrary external servers using arbitrary commandsSitaram Chamarty2014-08-021-0/+172
| | | | | (This was started off by someone on irc wanting to backup his repos to s3 using jgit.)
* (changes caused by doc revamp)Sitaram Chamarty2014-07-141-1/+1
|
* (experimental) util to upgrade rc file formatSitaram Chamarty2014-06-231-0/+212
|
* get ldap groupsDamien NOZAY2014-05-071-0/+22
| | | | | | | Add sample script for getting group membership from LDAP. based on ldapsearch. (committer added author name as comment in case of questions)
* Add script for querying IPA-based LDAP servers for group membershipRichard Clark2013-09-091-0/+229
|
* (contrib) user key managementRalf Hemmecke2013-09-082-0/+1179
committer's notes: code here, and docs in gitolite-doc repo, fetched from git://github.com/hemmecke/gitolite git://github.com/hemmecke/gitolite-doc respectively.