Git : Access to Repos via HTTP2021/06/18 |
|
Configure to access to Repos via HTTP.
|
|
| [1] | |
| [2] | |
| [3] | Configure Apache httpd to access to Git repositories. For example, set [/var/lib/git] as a root directory for Git repositories. |
|
[root@dlp ~]#
vi /etc/httpd/conf.d/git.conf # create new
SetEnv GIT_PROJECT_ROOT /var/lib/git
SetEnv GIT_HTTP_EXPORT_ALL
ScriptAlias /git/ /usr/libexec/git-core/git-http-backend/
<Location /git>
Options ExecCGI
AuthName "Git for HTTP"
AuthType Basic
AuthUserFile /etc/httpd/conf/.htpasswd
Require valid-user
</Location>
# add user : create a new file with [-c] [root@dlp ~]# htpasswd -c /etc/httpd/conf/.htpasswd cent New password: # set password Re-type new password: Adding password for user cent systemctl restart httpd |
| [4] | Create a Git repository under the root directory. |
|
[root@dlp ~]# cd /var/lib/git [root@dlp git]# mkdir project01.git [root@dlp git]# cd project01.git [root@dlp project01.git]# git init --bare --shared Initialized empty shared Git repository in /var/lib/git/project01.git/ [root@dlp project01.git]# chgrp -R apache /var/lib/git/project01.git
|
| [5] | If SELinux enabled, change policy. |
|
[root@dlp ~]# setsebool -P domain_can_mmap_files on
[root@dlp ~]#
vi smart-git.te # create new
module smart-git 1.0;
require {
type httpd_t;
type httpd_var_lib_t;
type git_sys_content_t;
class file { create link map rename setattr unlink write };
class dir { add_name create remove_name rmdir setattr write };
}
#============= httpd_t ==============
allow httpd_t git_sys_content_t:dir { add_name create remove_name rmdir setattr write };
allow httpd_t git_sys_content_t:file { create link rename setattr unlink write };
checkmodule -m -M -o smart-git.mod smart-git.te [root@dlp ~]# semodule_package --outfile smart-git.pp --module smart-git.mod [root@dlp ~]# semodule -i smart-git.pp |
| [6] | Verify to access to a Git repository via HTTP. |
|
# the user is you added with htpasswd on [3] [redhat@node01 work]$ git clone http://cent@dlp.srv.world/git/project01.git
Cloning into 'project01'...
Password for 'http://cent@dlp.srv.world': # password of the user in htpasswd
warning: You appear to have cloned an empty repository.
[redhat@node01 work]$
[redhat@node01 project01]$ cd project01 [redhat@node01 project01]$ git config --global user.name "Server World" [redhat@node01 project01]$ git config --global user.email "redhat@node01.srv.world"
echo testfile > testfile1.txt [redhat@node01 project01]$ git add testfile1.txt [redhat@node01 project01]$ git commit testfile1.txt -m "Initial Commit" [master (root-commit) b193823] Initial Commit 1 file changed, 1 insertion(+) create mode 100644 testfile1.txt[cent@node01 project01]$ git remote -v origin http://cent@dlp.srv.world/git/project01.git (fetch) origin http://cent@dlp.srv.world/git/project01.git (push)[redhat@node01 project01]$ git push origin master Password for 'http://cent@dlp.srv.world': Enumerating objects: 3, done. Counting objects: 100% (3/3), done. Writing objects: 100% (3/3), 234 bytes | 234.00 KiB/s, done. Total 3 (delta 0), reused 0 (delta 0), pack-reused 0 To http://dlp.srv.world/git/project01.git * [new branch] master -> master[cent@node01 project01]$ git ls-files testfile1.txt |
| Sponsored Link |
|
|