Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-20 Thread David C. Rankin
On 6/19/24 02:59, Łukasz Michalski wrote: Another lightweight alternative is to use kallithea (venv install) and put it behind apache. You will get web repo browser as a bonus :-) Regards, Łukasz Now I'm confused, I already have gitweb browser configured for the repositories, and it contin

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-19 Thread Łukasz Michalski
Another lightweight alternative is to use kallithea (venv install) and put it behind apache. You will get web repo browser as a bonus :-) Regards, Łukasz On 18/06/2024 22.42, David C. Rankin wrote: On 6/18/24 05:35, Carl Lei wrote: Oh, I meant to run another apache instance, serving only the

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-18 Thread Carl Lei
On Tue, 18 Jun 2024 15:42:10 -0500 "David C. Rankin" wrote: > On 6/18/24 05:35, Carl Lei wrote: > > Oh, I meant to run another apache instance, serving only the git > > CGI, and reverse-proxy from your main HTTP server to this dedicated > > git server. Actually it need not be apache, any kind of

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-18 Thread David C. Rankin
On 6/18/24 05:35, Carl Lei wrote: Oh, I meant to run another apache instance, serving only the git CGI, and reverse-proxy from your main HTTP server to this dedicated git server. Actually it need not be apache, any kind of server capable of running CGI will do fine. That I'll have to digest. S

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-18 Thread Carl Lei
On Tue, 18 Jun 2024 04:58:04 -0500 "David C. Rankin" wrote: > On 6/17/24 00:03, Carl Lei wrote: > > What about: create a dedicated "git" user, and run apache as user > > git? After all when new files are to be created they will have > > owner=running program, which could be a CGI program launched

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-18 Thread David C. Rankin
On 6/17/24 00:03, Carl Lei wrote: What about: create a dedicated "git" user, and run apache as user git? After all when new files are to be created they will have owner=running program, which could be a CGI program launched from apache, or a git program launched from SSH. If these are two differ

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread Óscar García Amor
El dom, 16-06-2024 a las 18:39 -0500, David C. Rankin escribió: >    github does something. I can pull over https and ssh still works > there. It > may be worth opening an issue with git to see how they feel this > catch 22 > should be handled for locally hosted servers. If I find a fix, I'll > r

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread Carl Lei
On Sun, 16 Jun 2024 03:41:57 -0500 "David C. Rankin" wrote: > All, > >After recent git update, read only repos hosted on a local Apache > server could no longer pull over https. (gitweb remained fine) > Repositories closed read/write over ssh were fine. > >On the server the repositories

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread Ryan Petris
On Sun, Jun 16, 2024, at 4:39 PM, David C. Rankin wrote: > On 6/16/24 05:30, Guus Snijders wrote: > > Have you tried using http:david instead? > > And make sure the files are group-writable. > > > > I haven't tested this, but this seems to answer all the mentioned > > constraints. > > > > Thank

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread x choice
🤔 maybe you can give yourself permissions to http owned files with ACLs https://www.redhat.com/sysadmin/linux-access-control-lists On Sun, Jun 16, 2024, 20:39 David C. Rankin wrote: > On 6/16/24 05:30, Guus Snijders wrote: > > Have you tried using http:david instead? > > And make sure the files

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread David C. Rankin
On 6/16/24 05:30, Guus Snijders wrote: Have you tried using http:david instead? And make sure the files are group-writable. I haven't tested this, but this seems to answer all the mentioned constraints. Thank you Guus, Unfortunately, yes, I've tried every combination of user:group ownershi

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread Ryan Petris
On Sun, Jun 16, 2024, at 3:30 AM, Guus Snijders wrote: > Op zo 16 jun. 2024 10:42 schreef David C. Rankin : >> [···] >>On the server the repositories under /srv/git were owned david:david >> (me). >> However, after the git change, git refused to serve over https unless the >> directories und

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread Guus Snijders
Op zo 16 jun. 2024 10:42 schreef David C. Rankin : > [···] >On the server the repositories under /srv/git were owned david:david > (me). > However, after the git change, git refused to serve over https unless the > directories under /srv/git were owned by http. > >Fine, change made - but n

Re: git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread Christian Heusel
On 24/06/16 03:41AM, David C. Rankin wrote: > All, Hello everyone, > After recent git update, read only repos hosted on a local Apache server > could no longer pull over https. (gitweb remained fine) Repositories closed > read/write over ssh were fine. > > On the server the repositories unde

git server changes - how to allow https AND ssh now that /srv/git/xxx.git must be owned by http?

2024-06-16 Thread David C. Rankin
All, After recent git update, read only repos hosted on a local Apache server could no longer pull over https. (gitweb remained fine) Repositories closed read/write over ssh were fine. On the server the repositories under /srv/git were owned david:david (me). However, after the git chang