deac/gitolite
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

add hook, the last piece

Browse source
This commit is contained in:
Sitaram Chamarty 2009-08-23 21:40:03 +05:30 committed by Sitaram Chamarty
parent 4a4b6e9d97
commit 2e38867b59
2 changed files with 85 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
gl-compile-conf
View file

@ -225,6 +225,7 @@ close(OUT);
# did not have that luxury, so it was forced to detect the first push and
# create it then
umask(0077);
my_chdir("$ENV{HOME}/$REPO_BASE");
for my $repo (keys %repos)
{
@ -233,6 +234,8 @@ for my $repo (keys %repos)
mkdir("$repo.git") or die "mkdir $repo.git failed: $!";
my_chdir("$repo.git");
system("git init --bare");
system("cp $GL_ADMINDIR/update-hook.pl hooks/update");
system("chmod 755 hooks/update");
my_chdir("$ENV{HOME}/$REPO_BASE");
}
}

82
update-hook.pl Executable file
View file

@ -0,0 +1,82 @@
#!/usr/bin/perl -w
use strict;
# === update ===
# this is gitosis-lite's update hook
# part of the gitosis-lite (GL) suite
# how run: via git, being copied as .git/hooks/update in every repo
# when: every push
# input:
# - see man githooks for STDIN
# - uses the compiled config file to get permissions info
# output: based on permissions etc., exit 0 or 1
# security:
# - none
# robustness:
# other notes:
# ----------------------------------------------------------------------------
# common definitions
# ----------------------------------------------------------------------------
our $GL_ADMINDIR;
our $GL_CONF;
our $GL_KEYDIR;
our $GL_CONF_COMPILED;
our $REPO_BASE;
our %repos;
my $glrc = $ENV{HOME} . "/.gitosis-lite.rc";
unless (my $ret = do $glrc)
{
die "parse $glrc failed: $@" if $@;
die "couldn't do $glrc: $!" unless defined $ret;
die "couldn't run $glrc" unless $ret;
}
die "couldnt do perms file" unless (my $ret = do $GL_CONF_COMPILED);
# ----------------------------------------------------------------------------
# definitions specific to this program
# ----------------------------------------------------------------------------
open(LOG, ">>", "$GL_ADMINDIR/log");
# ----------------------------------------------------------------------------
# start...
# ----------------------------------------------------------------------------
my $ref = shift;
my $oldsha = shift;
my $newsha = shift;
my $merge_base = '0' x 40;
chomp($merge_base = `git merge-base $oldsha $newsha`)
unless $oldsha eq '0' x 40;
# some of this is from an example hook in Documentation/howto of git.git, with
# some variations
# what are you trying to do? (is it 'W' or '+'?)
my $perm = 'W';
# rewriting a tag
$perm = '+' if $ref =~ m(refs/tags/) and $oldsha ne ('0' x 40);
# non-ff push to branch
$perm = '+' if $ref =~ m(refs/heads/) and $oldsha ne $merge_base;
my $allowed_refs = $repos{$ENV{GL_REPO}}{$perm}{$ENV{GL_USER}};
for my $refex (keys %$allowed_refs)
# refex? sure -- a regex to match a ref against :)
{
if ($ref =~ /$refex/)
{
print LOG "$perm: $ENV{GL_USER} $ENV{GL_REPO} $ref $oldsha $newsha\n";
close (LOG);
exit 0;
}
}
exit 1;