Re: [RFC] Secure central repositories by UNIX socket authentication

From: Dmitry Potapov <dpotapov@gmail.com>
Date: Jan 28, 2008, 08:14 UTC
Message-ID: <20080128081427.GP26664@dpotapov.dyndns.org>
In-Reply-To: <20080127173212.GW24004@spearce.org>

On Sun, Jan 27, 2008 at 12:32:13PM -0500, Shawn O. Pearce wrote:

> 
> So you come down to four options:

<snip>

How about gitosis? It requires only one extra user (usually called git), which is the owner of all repos. This user has git-shell as its login shell. All users are authorized by their ssh keys. The configuration and kyes are stored in the special repo called gitosis-admin. You can define what users to what repositories have read or write access. This is done by adding a user to one or more groups defined in gitosis configuration. You can have as much groups as you want. The default configuration looks like this:

[group gitosis-admin] writable = gitosis-admin members = your-name

It defines the gitosis-admin group, member of which can write to the gitosis-admin repo, and you are member of that group.

WRRNING: I have not used gitosis myself, but it looks worthy of a try.

Dmitry