all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: "pelzflorian (Florian Pelz)" <pelzflorian@pelzflorian.de>
To: guix-devel@gnu.org
Subject: Using Cgit with Gitolite
Date: Sun, 24 Nov 2019 23:37:24 +0100	[thread overview]
Message-ID: <20191124223724.tr4nnyn426pg25oy@pelzflorian.localdomain> (raw)

[-- Attachment #1: Type: text/plain, Size: 1933 bytes --]

Hello!

I am in the process of setting up a server and use Cgit with Gitolite.

I would like to add instructions to the Guix manual, but I have some
questions:

1) In order to make Cgit see my repos I need to use

(define git-group-permissions-activation
  #~(let ((dir "/var/lib/gitolite"))
      (if (file-exists? dir)
          (chmod dir #o755)
          (format #t "WARNING: ~a does not exist yet; reconfigure again!"))))

(define git-services
  (list
   ...
   (simple-service 'git-group-permissions activation-service-type
                   git-group-permissions-activation)))

Does this have robust guarantees to always be executed after adding
the gitolite git user and its home directory?

I am also not sure if/how it should be added to the Gitolite service.
Perhaps the gitolite-service’s activation should set the permissions
of its home directory to the complement of its umask by default?

2) I also need to set Gitolite’s umask to #o0022 in order to give read
permissions to other users not in the git group.  With #o0027 Cgit
tells me “No repositories found“.  Without success I tried adding
nginx to the git group or setting the fcgiwrap group to git, but Cgit
still has no read access.  I do not understand the reason because
afterwards with `sudo -u nginx git clone file:///…` I can access the
repos but Cgit cannot.  Is this possible?  Am I doing something wrong?

3) It appears I need to add openssh-service to use Gitolite.  I
believe it should be documented in the manual.  WDYT?


I attach a minimal Guix System configuration for testing using `guix
system vm-image config.scm`.  I test with it by using NetworkManager
with dnsmasq as described in “info "(guix)Networking Services"”.

My full working config so far is at:

https://mailbaby.de/git/machine-mailbaby-de/tree/config.scm?id=6c45ba19f8d5ff646f05563c642b6433c5acd988

Regards,
Florian

[-- Attachment #2: config.scm --]
[-- Type: application/vnd.lotus-screencam, Size: 1474 bytes --]

                 reply	other threads:[~2019-11-24 22:37 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20191124223724.tr4nnyn426pg25oy@pelzflorian.localdomain \
    --to=pelzflorian@pelzflorian.de \
    --cc=guix-devel@gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.