# Copyright (C) 2016-2023 RhodeCode GmbH # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License, version 3 # (only), as published by the Free Software Foundation. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program. If not, see . # # This program is dual-licensed. If you wish to learn more about the # RhodeCode Enterprise Edition, including its added features, Support services, # and proprietary license terms, please see https://rhodecode.com/licenses/ import os import sys import logging import tempfile import textwrap import collections from .base import VcsServer from rhodecode.model.db import RhodeCodeUi from rhodecode.model.settings import VcsSettingsModel log = logging.getLogger(__name__) class MercurialTunnelWrapper(object): process = None def __init__(self, server): self.server = server self.stdin = sys.stdin self.stdout = sys.stdout self.hooks_env_fd, self.hooks_env_path = tempfile.mkstemp(prefix='hgrc_rhodecode_') def create_hooks_env(self): repo_name = self.server.repo_name hg_flags = self.server.config_to_hgrc(repo_name) content = textwrap.dedent( ''' # RhodeCode SSH hooks version=2.0.0 {custom} ''' ).format(custom='\n'.join(hg_flags)) root = self.server.get_root_store() hgrc_custom = os.path.join(root, repo_name, '.hg', 'hgrc_rhodecode') hgrc_main = os.path.join(root, repo_name, '.hg', 'hgrc') # cleanup custom hgrc file if os.path.isfile(hgrc_custom): with open(hgrc_custom, 'wb') as f: f.write('') log.debug('Cleanup custom hgrc file under %s', hgrc_custom) # write temp with os.fdopen(self.hooks_env_fd, 'w') as hooks_env_file: hooks_env_file.write(content) return self.hooks_env_path def remove_configs(self): os.remove(self.hooks_env_path) def command(self, hgrc_path): root = self.server.get_root_store() command = ( "cd {root}; HGRCPATH={hgrc} {hg_path} -R {root}{repo_name} " "serve --stdio".format( root=root, hg_path=self.server.hg_path, repo_name=self.server.repo_name, hgrc=hgrc_path)) log.debug("Final CMD: %s", command) return command def run(self, extras): # at this point we cannot tell, we do further ACL checks # inside the hooks action = '?' # permissions are check via `pre_push_ssh_auth` hook self.server.update_environment(action=action, extras=extras) custom_hgrc_file = self.create_hooks_env() try: return os.system(self.command(custom_hgrc_file)) finally: self.remove_configs() class MercurialServer(VcsServer): backend = 'hg' repo_user_agent = 'mercurial' cli_flags = ['phases', 'largefiles', 'extensions', 'experimental', 'hooks'] def __init__(self, store, ini_path, repo_name, user, user_permissions, config, env): super().__init__(user, user_permissions, config, env) self.store = store self.ini_path = ini_path self.repo_name = repo_name self._path = self.hg_path = config.get('app:main', 'ssh.executable.hg') self.tunnel = MercurialTunnelWrapper(server=self) def config_to_hgrc(self, repo_name): ui_sections = collections.defaultdict(list) ui = VcsSettingsModel(repo=repo_name).get_ui_settings(section=None, key=None) # write default hooks default_hooks = [ ('pretxnchangegroup.ssh_auth', 'python:vcsserver.hooks.pre_push_ssh_auth'), ('pretxnchangegroup.ssh', 'python:vcsserver.hooks.pre_push_ssh'), ('changegroup.ssh', 'python:vcsserver.hooks.post_push_ssh'), ('preoutgoing.ssh', 'python:vcsserver.hooks.pre_pull_ssh'), ('outgoing.ssh', 'python:vcsserver.hooks.post_pull_ssh'), ] for k, v in default_hooks: ui_sections['hooks'].append((k, v)) for entry in ui: if not entry.active: continue sec = entry.section key = entry.key if sec in self.cli_flags: # we want only custom hooks, so we skip builtins if sec == 'hooks' and key in RhodeCodeUi.HOOKS_BUILTIN: continue ui_sections[sec].append([key, entry.value]) flags = [] for _sec, key_val in ui_sections.items(): flags.append(' ') flags.append(f'[{_sec}]') for key, val in key_val: flags.append(f'{key}= {val}') return flags