From: Dmitry Potapov <dpotapov@gmail.com>
Date: Mon, 28 Jan 2008 08:14:27 GMT
Subject: Re: [RFC] Secure central repositories by UNIX socket authentication
Message-ID: <20080128081427.GP26664@dpotapov.dyndns.org>
In-Reply-To: <20080127173212.GW24004@spearce.org>

On Sun, Jan 27, 2008 at 12:32:13PM -0500, Shawn O. Pearce wrote:
> 
> So you come down to four options:

<snip>

How about gitosis? It requires only one extra user (usually called git),
which is the owner of all repos. This user has git-shell as its login
shell. All users are authorized by their ssh keys. The configuration and
kyes are stored in the special repo called gitosis-admin. You can define
what users to what repositories have read or write access. This is done
by adding a user to one or more groups defined in gitosis configuration.
You can have as much groups as you want. The default configuration looks
like this:

[group gitosis-admin]
writable = gitosis-admin
members = your-name

It defines the gitosis-admin group, member of which can write to the
gitosis-admin repo, and you are member of that group.

WRRNING: I have not used gitosis myself, but it looks worthy of a try.

Dmitry