class Gitlab::GitoliteConfig

Attributes

conf[R]
config_tmp_dir[R]
ga_repo[R]

Public Instance Methods

admin_all_repo() click to toggle source

Enable access to all repos for gitolite admin. We use it for accept merge request feature

# File lib/gitlab/backend/gitolite_config.rb, line 162
def admin_all_repo
  owner_name = Gitlab.config.gitolite_admin_key

  # @ALL repos premission for gitolite owner
  repo_name = "@all"
  repo = if conf.has_repo?(repo_name)
           conf.get_repo(repo_name)
         else
           ::Gitolite::Config::Repo.new(repo_name)
         end

  repo.add_permission("RW+", "", owner_name)
  conf.add_repo(repo, true)
end
admin_all_repo!() click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 177
def admin_all_repo!
  apply { |config| config.admin_all_repo }
end
apply() { |self| ... } click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 20
def apply
  Timeout::timeout(30) do
    File.open(Rails.root.join('tmp', "gitlabhq-gitolite.lock"), "w+") do |f|
      begin
        # Set exclusive lock
        # to prevent race condition
        f.flock(File::LOCK_EX)

        # Pull gitolite-admin repo
        # in tmp dir before do any changes
        pull(config_tmp_dir)

        # Build ga_repo object and @conf
        # to access gitolite-admin configuration
        @conf = ga_repo.config

        # Do any changes
        # in gitolite-admin
        # config here
        yield(self)

        # Save changes in
        # gitolite-admin repo
        # before push it
        ga_repo.save

        # Push gitolite-admin repo
        # to apply all changes
        push(config_tmp_dir)
      ensure
        # Remove tmp dir
        # removing the gitolite folder first is important to avoid
        # NFS issues.
        FileUtils.rm_rf(File.join(config_tmp_dir, 'gitolite'))

        # Remove parent tmp dir
        FileUtils.rm_rf(config_tmp_dir)

        # Unlock so other task can access
        # gitolite configuration
        f.flock(File::LOCK_UN)
      end
    end
  end
rescue PullError => ex
  log("Pull error ->  " + ex.message)
  raise Gitolite::AccessDenied, ex.message

rescue PushError => ex
  log("Push error ->  " + " " + ex.message)
  raise Gitolite::AccessDenied, ex.message

rescue Exception => ex
  log(ex.class.name + " " + ex.message)
  raise Gitolite::AccessDenied.new("gitolite timeout")
end
destroy_project(project) click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 81
def destroy_project(project)
  FileUtils.rm_rf(project.path_to_repo)
  conf.rm_repo(project.path)
end
destroy_project!(project) click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 86
def destroy_project!(project)
  apply do |config|
    config.destroy_project(project)
  end
end
log(message) click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 77
def log message
  Gitlab::GitLogger.error(message)
end
rm_key(user) click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 98
def rm_key(user)
  key_path = File.join(config_tmp_dir, 'gitolite/keydir', "#{user}.pub")
  ga_key = ::Gitolite::SSHKey.from_file(key_path)
  ga_repo.rm_key(ga_key)
end
update_project(repo_name, project) click to toggle source

update or create

# File lib/gitlab/backend/gitolite_config.rb, line 105
def update_project(repo_name, project)
  repo = update_project_config(project, conf)
  conf.add_repo(repo, true)
end
update_project!(repo_name, project) click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 110
def update_project!(repo_name, project)
  apply do |config|
    config.update_project(repo_name, project)
  end
end
update_project_config(project, conf) click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 125
def update_project_config(project, conf)
  repo_name = project.path

  repo = if conf.has_repo?(repo_name)
           conf.get_repo(repo_name)
         else
           ::Gitolite::Config::Repo.new(repo_name)
         end

  name_readers = project.repository_readers
  name_writers = project.repository_writers
  name_masters = project.repository_masters

  pr_br = project.protected_branches.map(&:name).join("$ ")

  repo.clean_permissions

  # Deny access to protected branches for writers
  unless name_writers.blank? || pr_br.blank?
    repo.add_permission("-", pr_br.strip + "$ ", name_writers)
  end

  # Add read permissions
  repo.add_permission("R", "", name_readers) unless name_readers.blank?

  # Add write permissions
  repo.add_permission("RW+", "", name_writers) unless name_writers.blank?
  repo.add_permission("RW+", "", name_masters) unless name_masters.blank?

  # Add sharedRepository config
  repo.set_git_config("core.sharedRepository", "0660")

  repo
end
update_projects(projects) click to toggle source

Updates many projects and uses project.path as the repo path An order of magnitude faster than #update_project

# File lib/gitlab/backend/gitolite_config.rb, line 118
def update_projects(projects)
  projects.each do |project|
    repo = update_project_config(project, conf)
    conf.add_repo(repo, true)
  end
end
write_key(id, key) click to toggle source
# File lib/gitlab/backend/gitolite_config.rb, line 92
def write_key(id, key)
  File.open(File.join(config_tmp_dir, 'gitolite/keydir',"#{id}.pub"), 'w') do |f|
    f.write(key.gsub(%r\n/,''))
  end
end