Fix git group detection for gitolite ssh user.
The tasks gitlab:env:info mixes user and group, and presume as a group 'git'. However, gitolite group name can be anything. That patch add the git group name in the config, and check gitolite.ssh_user group against git.group (which defaults to 'git', as before this patch, if undefined). M config/gitlab.yml.example: Add 'group' in 'git' section Mention default value for the two extra settings M lib/tasks/gitlab/check.rake: Check that gitolite.ssh_user *group* is the one defined in git.group. Make sure to default to 'git' as the expected group if said group is undefined in the config. Note: uses a more complete regexp for the group detection (the group can start, end or be in the middle or the list of groups of gitolite.ssh_user) M: config/initializers/1_settings.rb: Add default values for gitolite.group and gitlab.user
This commit is contained in:
parent
eff6d3c12b
commit
471b5910a6
|
@ -29,6 +29,9 @@ gitlab:
|
||||||
## Project settings
|
## Project settings
|
||||||
default_projects_limit: 10
|
default_projects_limit: 10
|
||||||
|
|
||||||
|
## Account used for GitLab installation ('gitlab' if undefined)
|
||||||
|
user: gitlab
|
||||||
|
|
||||||
## Gravatar
|
## Gravatar
|
||||||
gravatar:
|
gravatar:
|
||||||
enabled: true # Use user avatar images from Gravatar.com (default: true)
|
enabled: true # Use user avatar images from Gravatar.com (default: true)
|
||||||
|
@ -100,6 +103,7 @@ gitolite:
|
||||||
receive_pack: true
|
receive_pack: true
|
||||||
ssh_user: git
|
ssh_user: git
|
||||||
ssh_host: localhost
|
ssh_host: localhost
|
||||||
|
group: git # default: 'git' if undefined
|
||||||
# ssh_port: 22
|
# ssh_port: 22
|
||||||
# config_file: gitolite.conf
|
# config_file: gitolite.conf
|
||||||
|
|
||||||
|
|
|
@ -50,6 +50,7 @@ Settings.gitlab['relative_url_root'] ||= ''
|
||||||
Settings.gitlab['protocol'] ||= Settings.gitlab.https ? "https" : "http"
|
Settings.gitlab['protocol'] ||= Settings.gitlab.https ? "https" : "http"
|
||||||
Settings.gitlab['email_from'] ||= "gitlab@#{Settings.gitlab.host}"
|
Settings.gitlab['email_from'] ||= "gitlab@#{Settings.gitlab.host}"
|
||||||
Settings.gitlab['url'] ||= Settings.send(:build_gitlab_url)
|
Settings.gitlab['url'] ||= Settings.send(:build_gitlab_url)
|
||||||
|
Settings.gitlab['user'] ||= 'gitlab'
|
||||||
|
|
||||||
Settings['gravatar'] ||= Settingslogic.new({})
|
Settings['gravatar'] ||= Settingslogic.new({})
|
||||||
Settings.gravatar['enabled'] ||= true
|
Settings.gravatar['enabled'] ||= true
|
||||||
|
@ -67,6 +68,7 @@ Settings.gitolite['upload_pack'] ||= (Settings.gitolite['upload_pack'] != false
|
||||||
Settings.gitolite['ssh_host'] ||= (Settings.gitlab.host || 'localhost')
|
Settings.gitolite['ssh_host'] ||= (Settings.gitlab.host || 'localhost')
|
||||||
Settings.gitolite['ssh_port'] ||= 22
|
Settings.gitolite['ssh_port'] ||= 22
|
||||||
Settings.gitolite['ssh_user'] ||= 'git'
|
Settings.gitolite['ssh_user'] ||= 'git'
|
||||||
|
Settings.gitolite['group'] ||= 'git'
|
||||||
Settings.gitolite['ssh_path_prefix'] ||= Settings.send(:build_gitolite_ssh_path_prefix)
|
Settings.gitolite['ssh_path_prefix'] ||= Settings.send(:build_gitolite_ssh_path_prefix)
|
||||||
|
|
||||||
Settings['backup'] ||= Settingslogic.new({})
|
Settings['backup'] ||= Settingslogic.new({})
|
||||||
|
|
|
@ -295,15 +295,16 @@ namespace :gitlab do
|
||||||
end
|
end
|
||||||
|
|
||||||
def check_gitlab_in_git_group
|
def check_gitlab_in_git_group
|
||||||
gitolite_ssh_user = Gitlab.config.gitolite.ssh_user
|
gitlab_user = Gitlab.config.gitlab.user
|
||||||
print "gitlab user is in #{gitolite_ssh_user} group? ... "
|
gitolite_group = Gitlab.config.gitolite.group
|
||||||
|
print "gitlab user '#{gitlab_user}' has git group '#{gitolite_group}'? ... "
|
||||||
|
|
||||||
if run_and_match("id -rnG", /\Wgit\W/)
|
if run_and_match("id -rnG", /^#{gitolite_group}\W|\W#{gitolite_group}\W|\W#{gitolite_group}$/)
|
||||||
puts "yes".green
|
puts "yes".green
|
||||||
else
|
else
|
||||||
puts "no".red
|
puts "no".red
|
||||||
try_fixing_it(
|
try_fixing_it(
|
||||||
"sudo usermod -a -G #{gitolite_ssh_user} gitlab"
|
"sudo usermod -a -G #{gitolite_group} #{gitlab_user}"
|
||||||
)
|
)
|
||||||
for_more_information(
|
for_more_information(
|
||||||
see_installation_guide_section "System Users"
|
see_installation_guide_section "System Users"
|
||||||
|
|
Loading…
Reference in a new issue