gitlabhq/lib/gitlab/backend/gitolite_config.rb

247 lines
6.8 KiB
Ruby
Raw Normal View History

require 'gitolite'
require 'timeout'
require 'fileutils'
module Gitlab
class GitoliteConfig
2012-09-07 19:43:51 +02:00
class PullError < StandardError; end
class PushError < StandardError; end
2013-01-19 10:58:36 +01:00
class BrokenGitolite < StandardError; end
2012-09-07 19:43:51 +02:00
attr_reader :config_tmp_dir, :tmp_dir, :ga_repo, :conf
def initialize
@tmp_dir = Rails.root.join("tmp").to_s
@config_tmp_dir = File.join(@tmp_dir,"gitlabhq-gitolite-#{Time.now.to_i}")
2012-09-07 08:15:30 +02:00
end
def ga_repo
2012-11-06 23:47:33 +01:00
@ga_repo ||= ::Gitolite::GitoliteAdmin.new(
File.join(config_tmp_dir,'gitolite'),
conf: Gitlab.config.gitolite.config_file
2012-11-06 23:47:33 +01:00
)
end
def apply
Timeout::timeout(30) do
File.open(File.join(tmp_dir, "gitlabhq-gitolite.lock"), "w+") do |f|
begin
2012-09-07 08:15:30 +02:00
# Set exclusive lock
# to prevent race condition
f.flock(File::LOCK_EX)
2012-09-07 08:15:30 +02:00
# Pull gitolite-admin repo
# in tmp dir before do any changes
pull
2012-09-07 08:15:30 +02:00
# Build ga_repo object and @conf
# to access gitolite-admin configuration
@conf = ga_repo.config
# Do any changes
# in gitolite-admin
# config here
yield(self)
2012-09-07 08:15:30 +02:00
# Save changes in
# gitolite-admin repo
# before push it
2012-09-07 08:15:30 +02:00
ga_repo.save
# Push gitolite-admin repo
# to apply all changes
push
ensure
2012-09-07 08:15:30 +02:00
# Remove tmp dir
# removing the gitolite folder first is important to avoid
# NFS issues.
FileUtils.rm_rf(File.join(config_tmp_dir, 'gitolite'))
# Remove parent tmp dir
FileUtils.rm_rf(config_tmp_dir)
# Unlock so other task can access
2012-09-07 08:15:30 +02:00
# gitolite configuration
f.flock(File::LOCK_UN)
end
end
end
2012-09-07 19:43:51 +02:00
rescue PullError => ex
2012-09-11 22:24:53 +02:00
log("Pull error -> " + ex.message)
2012-09-07 19:43:51 +02:00
raise Gitolite::AccessDenied, ex.message
rescue PushError => ex
2012-09-11 22:24:53 +02:00
log("Push error -> " + " " + ex.message)
2012-09-07 19:43:51 +02:00
raise Gitolite::AccessDenied, ex.message
2013-01-19 10:58:36 +01:00
rescue BrokenGitolite => ex
log("Gitolite error -> " + " " + ex.message)
raise Gitolite::AccessDenied, ex.message
2013-01-19 12:57:50 +01:00
rescue Exception => ex
log(ex.class.name + " " + ex.message)
raise Gitolite::AccessDenied.new("gitolite timeout")
end
2012-09-11 22:24:53 +02:00
def log message
Gitlab::GitLogger.error(message)
end
def destroy_project(project)
FileUtils.rm_rf(project.repository.path_to_repo)
conf.rm_repo(project.path_with_namespace)
end
def clean_repo repo_name
conf.rm_repo(repo_name)
end
def destroy_project!(project)
apply do |config|
config.destroy_project(project)
end
end
def write_key(id, key)
File.open(File.join(config_tmp_dir, 'gitolite/keydir',"#{id}.pub"), 'w') do |f|
f.write(key.gsub(/\n/,''))
end
end
def rm_key(user)
key_path = File.join(config_tmp_dir, 'gitolite/keydir', "#{user}.pub")
ga_key = ::Gitolite::SSHKey.from_file(key_path)
ga_repo.rm_key(ga_key)
end
# update or create
def update_project(project)
repo = update_project_config(project, conf)
conf.add_repo(repo, true)
end
def update_project!( project)
apply do |config|
config.update_project(project)
end
end
# Updates many projects and uses project.path_with_namespace as the repo path
# An order of magnitude faster than update_project
def update_projects(projects)
projects.each do |project|
repo = update_project_config(project, conf)
conf.add_repo(repo, true)
end
end
def update_project_config(project, conf)
2012-11-22 20:51:16 +01:00
repo_name = project.path_with_namespace
repo = if conf.has_repo?(repo_name)
conf.get_repo(repo_name)
else
::Gitolite::Config::Repo.new(repo_name)
end
name_readers = project.team.repository_readers
name_writers = project.team.repository_writers
name_masters = project.team.repository_masters
pr_br = project.protected_branches.map(&:name).join("$ ")
repo.clean_permissions
# Deny access to protected branches for writers
unless name_writers.blank? || pr_br.blank?
repo.add_permission("-", pr_br.strip + "$ ", name_writers)
end
# Add read permissions
repo.add_permission("R", "", name_readers) unless name_readers.blank?
# Add write permissions
repo.add_permission("RW+", "", name_writers) unless name_writers.blank?
repo.add_permission("RW+", "", name_masters) unless name_masters.blank?
2012-10-17 09:43:44 +02:00
# Add sharedRepository config
repo.set_git_config("core.sharedRepository", "0660")
repo
end
2012-09-07 08:15:30 +02:00
# Enable access to all repos for gitolite admin.
# We use it for accept merge request feature
def admin_all_repo
owner_name = Gitlab.config.gitolite.admin_key
# @ALL repos premission for gitolite owner
repo_name = "@all"
repo = if conf.has_repo?(repo_name)
conf.get_repo(repo_name)
else
::Gitolite::Config::Repo.new(repo_name)
end
repo.add_permission("RW+", "", owner_name)
conf.add_repo(repo, true)
end
def admin_all_repo!
apply { |config| config.admin_all_repo }
end
private
def pull
# Create config tmp dir like "RAILS_ROOT/tmp/gitlabhq-gitolite-132545"
Dir.mkdir config_tmp_dir
2012-09-07 19:43:51 +02:00
# Clone gitolite-admin repo into tmp dir
popen("git clone #{Gitlab.config.gitolite.admin_uri} #{config_tmp_dir}/gitolite", tmp_dir)
# Ensure file with config presents after cloning
unless File.exists?(File.join(config_tmp_dir, 'gitolite', 'conf', 'gitolite.conf'))
2012-09-07 19:43:51 +02:00
raise PullError, "unable to clone gitolite-admin repo"
end
end
def push
output, status = popen('git add -A')
raise "Git add failed." unless status.zero?
# git commit returns 0 on success, and 1 if there is nothing to commit
output, status = popen('git commit -m "GitLab"')
raise "Git add failed." unless [0,1].include?(status)
2013-01-19 10:58:36 +01:00
output, status = popen('git push')
if output =~ /remote\: FATAL/
raise BrokenGitolite, output
2013-01-19 10:58:36 +01:00
end
if status.zero? || output =~ /Everything up\-to\-date/
return true
2012-09-07 19:43:51 +02:00
else
raise PushError, "unable to push gitolite-admin repo"
end
end
def popen(cmd, path = nil)
path ||= File.join(config_tmp_dir,'gitolite')
vars = { "PWD" => path }
options = { :chdir => path }
@cmd_output = ""
@cmd_status = 0
Open3.popen3(vars, cmd, options) do |stdin, stdout, stderr, wait_thr|
@cmd_status = wait_thr.value.exitstatus
@cmd_output << stdout.read
@cmd_output << stderr.read
end
return @cmd_output, @cmd_status
end
end
end