Re: Git Server Repository Security?

From: John McIntyre <joh98.mac@gmail.com>
Date: May 18, 2015, 15:07 UTC
Message-ID: <CABQ4iYgauiENEv5ESbJTgUWVhRjt3NxmJfxTZTaa8U072atDEQ@mail.gmail.com>
In-Reply-To: <20150518123948.GA17075@book.hvoigt.net>

2015-05-18 13:39 GMT+01:00 Heiko Voigt <hvoigt@hvoigt.net>:

Show 17 quoted lines

> On Mon, May 18, 2015 at 01:32:07PM +0100, John McIntyre wrote:
>> All right, so I'm a bit confused.  I followed the instructions to get
>> gitolite, and put a public key, placing it on the server.  I then
>> run..
>>
>> ***
>> gitolite setup -pk server-git01_rsa.pub
>> Initialized empty Git repository in /home/git/repositories/gitolite-admin.git/
>> Initialized empty Git repository in /home/git/repositories/testing.git/
>> ***
>>
>> Our repositories are under /opt/git/n where n is the name of the repo.
>>
>> Is there a config file where this is defined?
>
> I do not know, because I always used /home/git. In case not: How about
> just using a symlink? And there is a lot of information on google ;-)

I'm confused. If I run the gitolite command again, in the /opt/git directory, will that set it up correctly?

And I thought that access was via key? In the example config files I've seen, there is no mention of different keys in the config file.

Our users can currently ssh into the box. I want to stop that, but since they all ssh in as the use 'git', if I change the shell of that user to /sbin/nologin or something similar, I'm effectively locking out the git user.