hg-ssh
87 lines
| 3.0 KiB
| text/plain
|
TextLexer
/ contrib / hg-ssh
|
r1537 | #!/usr/bin/env python | ||
# | ||||
|
r5191 | # Copyright 2005-2007 by Intevation GmbH <intevation@intevation.de> | ||
|
r8228 | # | ||
|
r1537 | # Author(s): | ||
# Thomas Arendsen Hein <thomas@intevation.de> | ||||
# | ||||
|
r8225 | # This software may be used and distributed according to the terms of the | ||
|
r10263 | # GNU General Public License version 2 or any later version. | ||
|
r1537 | |||
""" | ||||
hg-ssh - a wrapper for ssh access to a limited set of mercurial repos | ||||
To be used in ~/.ssh/authorized_keys with the "command" option, see sshd(8): | ||||
command="hg-ssh path/to/repo1 /path/to/repo2 ~/repo3 ~user/repo4" ssh-dss ... | ||||
(probably together with these other useful options: | ||||
no-port-forwarding,no-X11-forwarding,no-agent-forwarding) | ||||
|
r13996 | This allows pull/push over ssh from/to the repositories given as arguments. | ||
|
r1537 | |||
If all your repositories are subdirectories of a common directory, you can | ||||
allow shorter paths with: | ||||
command="cd path/to/my/repositories && hg-ssh repo1 subdir/repo2" | ||||
|
r1640 | |||
You can use pattern matching of your normal shell, e.g.: | ||||
command="cd repos && hg-ssh user/thomas/* projects/{mercurial,foo}" | ||||
|
r16836 | |||
You can also add a --read-only flag to allow read-only access to a key, e.g.: | ||||
command="hg-ssh --read-only repos/*" | ||||
|
r1537 | """ | ||
|
r5197 | # enable importing on demand to reduce startup time | ||
from mercurial import demandimport; demandimport.enable() | ||||
|
r32050 | from mercurial import dispatch, ui as uimod | ||
|
r1537 | |||
|
r15897 | import sys, os, shlex | ||
|
r1537 | |||
|
r16779 | def main(): | ||
cwd = os.getcwd() | ||||
|
r16836 | readonly = False | ||
args = sys.argv[1:] | ||||
while len(args): | ||||
if args[0] == '--read-only': | ||||
readonly = True | ||||
args.pop(0) | ||||
else: | ||||
break | ||||
|
r16779 | allowed_paths = [os.path.normpath(os.path.join(cwd, | ||
os.path.expanduser(path))) | ||||
|
r16836 | for path in args] | ||
|
r16779 | orig_cmd = os.getenv('SSH_ORIGINAL_COMMAND', '?') | ||
try: | ||||
cmdargv = shlex.split(orig_cmd) | ||||
|
r28047 | except ValueError as e: | ||
|
r16779 | sys.stderr.write('Illegal command "%s": %s\n' % (orig_cmd, e)) | ||
sys.exit(255) | ||||
|
r1537 | |||
|
r16779 | if cmdargv[:2] == ['hg', '-R'] and cmdargv[3:] == ['serve', '--stdio']: | ||
path = cmdargv[2] | ||||
repo = os.path.normpath(os.path.join(cwd, os.path.expanduser(path))) | ||||
if repo in allowed_paths: | ||||
|
r16836 | cmd = ['-R', repo, 'serve', '--stdio'] | ||
|
r32050 | req = dispatch.request(cmd) | ||
|
r16836 | if readonly: | ||
|
r32050 | if not req.ui: | ||
req.ui = uimod.ui.load() | ||||
req.ui.setconfig('hooks', 'pretxnopen.hg-ssh', | ||||
'python:__main__.rejectpush', 'hg-ssh') | ||||
req.ui.setconfig('hooks', 'prepushkey.hg-ssh', | ||||
'python:__main__.rejectpush', 'hg-ssh') | ||||
dispatch.dispatch(req) | ||||
|
r16779 | else: | ||
sys.stderr.write('Illegal repository "%s"\n' % repo) | ||||
sys.exit(255) | ||||
|
r1537 | else: | ||
|
r16779 | sys.stderr.write('Illegal command "%s"\n' % orig_cmd) | ||
|
r16607 | sys.exit(255) | ||
|
r1537 | |||
|
r16836 | def rejectpush(ui, **kwargs): | ||
|
r28045 | ui.warn(("Permission denied\n")) | ||
|
r16836 | # mercurial hooks use unix process conventions for hook return values | ||
# so a truthy return means failure | ||||
return True | ||||
|
r16779 | if __name__ == '__main__': | ||
main() | ||||