83 lines
2.2 KiB
Perl
83 lines
2.2 KiB
Perl
|
#!/usr/bin/perl -w
|
||
|
|
|
||
|
|
use strict;
|
||
|
|
|
||
|
|
# === update ===
|
||
|
|
# this is gitosis-lite's update hook
|
||
|
|
|
||
|
|
# part of the gitosis-lite (GL) suite
|
||
|
|
|
||
|
|
# how run: via git, being copied as .git/hooks/update in every repo
|
||
|
|
# when: every push
|
||
|
|
# input:
|
||
|
|
# - see man githooks for STDIN
|
||
|
|
# - uses the compiled config file to get permissions info
|
||
|
|
# output: based on permissions etc., exit 0 or 1
|
||
|
|
# security:
|
||
|
|
# - none
|
||
|
|
|
||
|
|
# robustness:
|
||
|
|
|
||
|
|
# other notes:
|
||
|
|
|
||
|
|
# ----------------------------------------------------------------------------
|
||
|
|
# common definitions
|
||
|
|
# ----------------------------------------------------------------------------
|
||
|
|
|
||
|
|
our $GL_ADMINDIR;
|
||
|
|
our $GL_CONF;
|
||
|
|
our $GL_KEYDIR;
|
||
|
|
our $GL_CONF_COMPILED;
|
||
|
|
our $REPO_BASE;
|
||
|
|
our %repos;
|
||
|
|
|
||
|
|
my $glrc = $ENV{HOME} . "/.gitosis-lite.rc";
|
||
|
|
unless (my $ret = do $glrc)
|
||
|
|
{
|
||
|
|
die "parse $glrc failed: $@" if $@;
|
||
|
|
die "couldn't do $glrc: $!" unless defined $ret;
|
||
|
|
die "couldn't run $glrc" unless $ret;
|
||
|
|
}
|
||
|
|
|
||
|
|
die "couldnt do perms file" unless (my $ret = do $GL_CONF_COMPILED);
|
||
|
|
|
||
|
|
# ----------------------------------------------------------------------------
|
||
|
|
# definitions specific to this program
|
||
|
|
# ----------------------------------------------------------------------------
|
||
|
|
|
||
|
|
open(LOG, ">>", "$GL_ADMINDIR/log");
|
||
|
|
|
||
|
|
# ----------------------------------------------------------------------------
|
||
|
|
# start...
|
||
|
|
# ----------------------------------------------------------------------------
|
||
|
|
|
||
|
|
my $ref = shift;
|
||
|
|
my $oldsha = shift;
|
||
|
|
my $newsha = shift;
|
||
|
|
my $merge_base = '0' x 40;
|
||
|
|
chomp($merge_base = `git merge-base $oldsha $newsha`)
|
||
|
|
unless $oldsha eq '0' x 40;
|
||
|
|
|
||
|
|
# some of this is from an example hook in Documentation/howto of git.git, with
|
||
|
|
# some variations
|
||
|
|
|
||
|
|
# what are you trying to do? (is it 'W' or '+'?)
|
||
|
|
my $perm = 'W';
|
||
|
|
# rewriting a tag
|
||
|
|
$perm = '+' if $ref =~ m(refs/tags/) and $oldsha ne ('0' x 40);
|
||
|
|
# non-ff push to branch
|
||
|
|
$perm = '+' if $ref =~ m(refs/heads/) and $oldsha ne $merge_base;
|
||
|
|
|
||
|
|
my $allowed_refs = $repos{$ENV{GL_REPO}}{$perm}{$ENV{GL_USER}};
|
||
|
|
for my $refex (keys %$allowed_refs)
|
||
|
|
# refex? sure -- a regex to match a ref against :)
|
||
|
|
{
|
||
|
|
if ($ref =~ /$refex/)
|
||
|
|
{
|
||
|
|
print LOG "$perm: $ENV{GL_USER} $ENV{GL_REPO} $ref $oldsha $newsha\n";
|
||
|
|
close (LOG);
|
||
|
|
exit 0;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
exit 1;
|