t5510: harden the way verify-pack is used
[alt-git.git] / builtin-init-db.c
blob6cc945d5075b03727f93194cd67122e6bff49764
1 /*
2 * GIT - The information manager from hell
4 * Copyright (C) Linus Torvalds, 2005
5 */
6 #include "cache.h"
7 #include "builtin.h"
8 #include "exec_cmd.h"
10 #ifndef DEFAULT_GIT_TEMPLATE_DIR
11 #define DEFAULT_GIT_TEMPLATE_DIR "/usr/share/git-core/templates"
12 #endif
14 #ifdef NO_TRUSTABLE_FILEMODE
15 #define TEST_FILEMODE 0
16 #else
17 #define TEST_FILEMODE 1
18 #endif
20 static int init_is_bare_repository = 0;
21 static int init_shared_repository = -1;
23 static void safe_create_dir(const char *dir, int share)
25 if (mkdir(dir, 0777) < 0) {
26 if (errno != EEXIST) {
27 perror(dir);
28 exit(1);
31 else if (share && adjust_shared_perm(dir))
32 die("Could not make %s writable by group\n", dir);
35 static void copy_templates_1(char *path, int baselen,
36 char *template, int template_baselen,
37 DIR *dir)
39 struct dirent *de;
41 /* Note: if ".git/hooks" file exists in the repository being
42 * re-initialized, /etc/core-git/templates/hooks/update would
43 * cause "git init" to fail here. I think this is sane but
44 * it means that the set of templates we ship by default, along
45 * with the way the namespace under .git/ is organized, should
46 * be really carefully chosen.
48 safe_create_dir(path, 1);
49 while ((de = readdir(dir)) != NULL) {
50 struct stat st_git, st_template;
51 int namelen;
52 int exists = 0;
54 if (de->d_name[0] == '.')
55 continue;
56 namelen = strlen(de->d_name);
57 if ((PATH_MAX <= baselen + namelen) ||
58 (PATH_MAX <= template_baselen + namelen))
59 die("insanely long template name %s", de->d_name);
60 memcpy(path + baselen, de->d_name, namelen+1);
61 memcpy(template + template_baselen, de->d_name, namelen+1);
62 if (lstat(path, &st_git)) {
63 if (errno != ENOENT)
64 die("cannot stat %s", path);
66 else
67 exists = 1;
69 if (lstat(template, &st_template))
70 die("cannot stat template %s", template);
72 if (S_ISDIR(st_template.st_mode)) {
73 DIR *subdir = opendir(template);
74 int baselen_sub = baselen + namelen;
75 int template_baselen_sub = template_baselen + namelen;
76 if (!subdir)
77 die("cannot opendir %s", template);
78 path[baselen_sub++] =
79 template[template_baselen_sub++] = '/';
80 path[baselen_sub] =
81 template[template_baselen_sub] = 0;
82 copy_templates_1(path, baselen_sub,
83 template, template_baselen_sub,
84 subdir);
85 closedir(subdir);
87 else if (exists)
88 continue;
89 else if (S_ISLNK(st_template.st_mode)) {
90 char lnk[256];
91 int len;
92 len = readlink(template, lnk, sizeof(lnk));
93 if (len < 0)
94 die("cannot readlink %s", template);
95 if (sizeof(lnk) <= len)
96 die("insanely long symlink %s", template);
97 lnk[len] = 0;
98 if (symlink(lnk, path))
99 die("cannot symlink %s %s", lnk, path);
101 else if (S_ISREG(st_template.st_mode)) {
102 if (copy_file(path, template, st_template.st_mode))
103 die("cannot copy %s to %s", template, path);
105 else
106 error("ignoring template %s", template);
110 static void copy_templates(const char *template_dir)
112 char path[PATH_MAX];
113 char template_path[PATH_MAX];
114 int template_len;
115 DIR *dir;
116 const char *git_dir = get_git_dir();
117 int len = strlen(git_dir);
119 if (!template_dir)
120 template_dir = getenv(TEMPLATE_DIR_ENVIRONMENT);
121 if (!template_dir)
122 template_dir = system_path(DEFAULT_GIT_TEMPLATE_DIR);
123 if (!template_dir[0])
124 return;
125 template_len = strlen(template_dir);
126 if (PATH_MAX <= (template_len+strlen("/config")))
127 die("insanely long template path %s", template_dir);
128 strcpy(template_path, template_dir);
129 if (template_path[template_len-1] != '/') {
130 template_path[template_len++] = '/';
131 template_path[template_len] = 0;
133 dir = opendir(template_path);
134 if (!dir) {
135 fprintf(stderr, "warning: templates not found %s\n",
136 template_dir);
137 return;
140 /* Make sure that template is from the correct vintage */
141 strcpy(template_path + template_len, "config");
142 repository_format_version = 0;
143 git_config_from_file(check_repository_format_version,
144 template_path, NULL);
145 template_path[template_len] = 0;
147 if (repository_format_version &&
148 repository_format_version != GIT_REPO_VERSION) {
149 fprintf(stderr, "warning: not copying templates of "
150 "a wrong format version %d from '%s'\n",
151 repository_format_version,
152 template_dir);
153 closedir(dir);
154 return;
157 memcpy(path, git_dir, len);
158 if (len && path[len - 1] != '/')
159 path[len++] = '/';
160 path[len] = 0;
161 copy_templates_1(path, len,
162 template_path, template_len,
163 dir);
164 closedir(dir);
167 static int create_default_files(const char *template_path)
169 const char *git_dir = get_git_dir();
170 unsigned len = strlen(git_dir);
171 static char path[PATH_MAX];
172 struct stat st1;
173 char repo_version_string[10];
174 char junk[2];
175 int reinit;
176 int filemode;
178 if (len > sizeof(path)-50)
179 die("insane git directory %s", git_dir);
180 memcpy(path, git_dir, len);
182 if (len && path[len-1] != '/')
183 path[len++] = '/';
186 * Create .git/refs/{heads,tags}
188 safe_create_dir(git_path("refs"), 1);
189 safe_create_dir(git_path("refs/heads"), 1);
190 safe_create_dir(git_path("refs/tags"), 1);
192 /* First copy the templates -- we might have the default
193 * config file there, in which case we would want to read
194 * from it after installing.
196 copy_templates(template_path);
198 git_config(git_default_config, NULL);
199 is_bare_repository_cfg = init_is_bare_repository;
200 if (init_shared_repository != -1)
201 shared_repository = init_shared_repository;
204 * We would have created the above under user's umask -- under
205 * shared-repository settings, we would need to fix them up.
207 if (shared_repository) {
208 adjust_shared_perm(get_git_dir());
209 adjust_shared_perm(git_path("refs"));
210 adjust_shared_perm(git_path("refs/heads"));
211 adjust_shared_perm(git_path("refs/tags"));
215 * Create the default symlink from ".git/HEAD" to the "master"
216 * branch, if it does not exist yet.
218 strcpy(path + len, "HEAD");
219 reinit = (!access(path, R_OK)
220 || readlink(path, junk, sizeof(junk)-1) != -1);
221 if (!reinit) {
222 if (create_symref("HEAD", "refs/heads/master", NULL) < 0)
223 exit(1);
226 /* This forces creation of new config file */
227 sprintf(repo_version_string, "%d", GIT_REPO_VERSION);
228 git_config_set("core.repositoryformatversion", repo_version_string);
230 path[len] = 0;
231 strcpy(path + len, "config");
233 /* Check filemode trustability */
234 filemode = TEST_FILEMODE;
235 if (TEST_FILEMODE && !lstat(path, &st1)) {
236 struct stat st2;
237 filemode = (!chmod(path, st1.st_mode ^ S_IXUSR) &&
238 !lstat(path, &st2) &&
239 st1.st_mode != st2.st_mode);
241 git_config_set("core.filemode", filemode ? "true" : "false");
243 if (is_bare_repository())
244 git_config_set("core.bare", "true");
245 else {
246 const char *work_tree = get_git_work_tree();
247 git_config_set("core.bare", "false");
248 /* allow template config file to override the default */
249 if (log_all_ref_updates == -1)
250 git_config_set("core.logallrefupdates", "true");
251 if (prefixcmp(git_dir, work_tree) ||
252 strcmp(git_dir + strlen(work_tree), "/.git")) {
253 git_config_set("core.worktree", work_tree);
257 if (!reinit) {
258 /* Check if symlink is supported in the work tree */
259 path[len] = 0;
260 strcpy(path + len, "tXXXXXX");
261 if (!close(xmkstemp(path)) &&
262 !unlink(path) &&
263 !symlink("testing", path) &&
264 !lstat(path, &st1) &&
265 S_ISLNK(st1.st_mode))
266 unlink(path); /* good */
267 else
268 git_config_set("core.symlinks", "false");
270 /* Check if the filesystem is case-insensitive */
271 path[len] = 0;
272 strcpy(path + len, "CoNfIg");
273 if (!access(path, F_OK))
274 git_config_set("core.ignorecase", "true");
277 return reinit;
280 int init_db(const char *template_dir, unsigned int flags)
282 const char *sha1_dir;
283 char *path;
284 int len, reinit;
286 safe_create_dir(get_git_dir(), 0);
288 init_is_bare_repository = is_bare_repository();
290 /* Check to see if the repository version is right.
291 * Note that a newly created repository does not have
292 * config file, so this will not fail. What we are catching
293 * is an attempt to reinitialize new repository with an old tool.
295 check_repository_format();
297 reinit = create_default_files(template_dir);
299 sha1_dir = get_object_directory();
300 len = strlen(sha1_dir);
301 path = xmalloc(len + 40);
302 memcpy(path, sha1_dir, len);
304 safe_create_dir(sha1_dir, 1);
305 strcpy(path+len, "/pack");
306 safe_create_dir(path, 1);
307 strcpy(path+len, "/info");
308 safe_create_dir(path, 1);
310 if (shared_repository) {
311 char buf[10];
312 /* We do not spell "group" and such, so that
313 * the configuration can be read by older version
314 * of git. Note, we use octal numbers for new share modes,
315 * and compatibility values for PERM_GROUP and
316 * PERM_EVERYBODY.
318 if (shared_repository == PERM_GROUP)
319 sprintf(buf, "%d", OLD_PERM_GROUP);
320 else if (shared_repository == PERM_EVERYBODY)
321 sprintf(buf, "%d", OLD_PERM_EVERYBODY);
322 else
323 sprintf(buf, "0%o", shared_repository);
324 git_config_set("core.sharedrepository", buf);
325 git_config_set("receive.denyNonFastforwards", "true");
328 if (!(flags & INIT_DB_QUIET))
329 printf("%s%s Git repository in %s/\n",
330 reinit ? "Reinitialized existing" : "Initialized empty",
331 shared_repository ? " shared" : "",
332 get_git_dir());
334 return 0;
337 static int guess_repository_type(const char *git_dir)
339 char cwd[PATH_MAX];
340 const char *slash;
343 * "GIT_DIR=. git init" is always bare.
344 * "GIT_DIR=`pwd` git init" too.
346 if (!strcmp(".", git_dir))
347 return 1;
348 if (!getcwd(cwd, sizeof(cwd)))
349 die("cannot tell cwd");
350 if (!strcmp(git_dir, cwd))
351 return 1;
353 * "GIT_DIR=.git or GIT_DIR=something/.git is usually not.
355 if (!strcmp(git_dir, ".git"))
356 return 0;
357 slash = strrchr(git_dir, '/');
358 if (slash && !strcmp(slash, "/.git"))
359 return 0;
362 * Otherwise it is often bare. At this point
363 * we are just guessing.
365 return 1;
368 static const char init_db_usage[] =
369 "git init [-q | --quiet] [--bare] [--template=<template-directory>] [--shared[=<permissions>]]";
372 * If you want to, you can share the DB area with any number of branches.
373 * That has advantages: you can save space by sharing all the SHA1 objects.
374 * On the other hand, it might just make lookup slower and messier. You
375 * be the judge. The default case is to have one DB per managed directory.
377 int cmd_init_db(int argc, const char **argv, const char *prefix)
379 const char *git_dir;
380 const char *template_dir = NULL;
381 unsigned int flags = 0;
382 int i;
384 for (i = 1; i < argc; i++, argv++) {
385 const char *arg = argv[1];
386 if (!prefixcmp(arg, "--template="))
387 template_dir = arg+11;
388 else if (!strcmp(arg, "--bare")) {
389 static char git_dir[PATH_MAX+1];
390 is_bare_repository_cfg = 1;
391 setenv(GIT_DIR_ENVIRONMENT, getcwd(git_dir,
392 sizeof(git_dir)), 0);
393 } else if (!strcmp(arg, "--shared"))
394 init_shared_repository = PERM_GROUP;
395 else if (!prefixcmp(arg, "--shared="))
396 init_shared_repository = git_config_perm("arg", arg+9);
397 else if (!strcmp(arg, "-q") || !strcmp(arg, "--quiet"))
398 flags |= INIT_DB_QUIET;
399 else
400 usage(init_db_usage);
404 * GIT_WORK_TREE makes sense only in conjunction with GIT_DIR
405 * without --bare. Catch the error early.
407 git_dir = getenv(GIT_DIR_ENVIRONMENT);
408 if ((!git_dir || is_bare_repository_cfg == 1)
409 && getenv(GIT_WORK_TREE_ENVIRONMENT))
410 die("%s (or --work-tree=<directory>) not allowed without "
411 "specifying %s (or --git-dir=<directory>)",
412 GIT_WORK_TREE_ENVIRONMENT,
413 GIT_DIR_ENVIRONMENT);
416 * Set up the default .git directory contents
418 if (!git_dir)
419 git_dir = DEFAULT_GIT_DIR_ENVIRONMENT;
421 if (is_bare_repository_cfg < 0)
422 is_bare_repository_cfg = guess_repository_type(git_dir);
424 if (!is_bare_repository_cfg) {
425 if (git_dir) {
426 const char *git_dir_parent = strrchr(git_dir, '/');
427 if (git_dir_parent) {
428 char *rel = xstrndup(git_dir, git_dir_parent - git_dir);
429 git_work_tree_cfg = xstrdup(make_absolute_path(rel));
430 free(rel);
433 if (!git_work_tree_cfg) {
434 git_work_tree_cfg = xcalloc(PATH_MAX, 1);
435 if (!getcwd(git_work_tree_cfg, PATH_MAX))
436 die ("Cannot access current working directory.");
438 if (access(get_git_work_tree(), X_OK))
439 die ("Cannot access work tree '%s'",
440 get_git_work_tree());
443 set_git_dir(make_absolute_path(git_dir));
445 return init_db(template_dir, flags);