git-interface/git-serve.py

   1 #!/usr/bin/python3
   2
   3 import os
   4 import re
   5 import shlex
   6 import sys
   7 import time
   8
   9 import config
  10 import db
  11
  12 repo_path = config.get('serve', 'repo-path')
  13 repo_regex = config.get('serve', 'repo-regex')
  14 git_shell_cmd = config.get('serve', 'git-shell-cmd')
  15 git_update_cmd = config.get('serve', 'git-update-cmd')
  16 ssh_cmdline = config.get('serve', 'ssh-cmdline')
  17
  18 enable_maintenance = config.getboolean('options', 'enable-maintenance')
  19 maintenance_exc = config.get('options', 'maintenance-exceptions').split()
  20
  21
  22 def pkgbase_from_name(pkgbase):
  23     conn = db.Connection()
  24     cur = conn.execute("SELECT ID FROM PackageBases WHERE Name = ?", [pkgbase])
  25
  26     row = cur.fetchone()
  27     return row[0] if row else None
  28
  29
  30 def pkgbase_exists(pkgbase):
  31     return pkgbase_from_name(pkgbase) is not None
  32
  33
  34 def list_repos(user):
  35     conn = db.Connection()
  36
  37     cur = conn.execute("SELECT ID FROM Users WHERE Username = ?", [user])
  38     userid = cur.fetchone()[0]
  39     if userid == 0:
  40         die('{:s}: unknown user: {:s}'.format(action, user))
  41
  42     cur = conn.execute("SELECT Name, PackagerUID FROM PackageBases " +
  43                        "WHERE MaintainerUID = ?", [userid])
  44     for row in cur:
  45         print((' ' if row[1] else '*') + row[0])
  46     conn.close()
  47
  48
  49 def create_pkgbase(pkgbase, user):
  50     if not re.match(repo_regex, pkgbase):
  51         die('{:s}: invalid repository name: {:s}'.format(action, pkgbase))
  52     if pkgbase_exists(pkgbase):
  53         die('{:s}: package base already exists: {:s}'.format(action, pkgbase))
  54
  55     conn = db.Connection()
  56
  57     cur = conn.execute("SELECT ID FROM Users WHERE Username = ?", [user])
  58     userid = cur.fetchone()[0]
  59     if userid == 0:
  60         die('{:s}: unknown user: {:s}'.format(action, user))
  61
  62     now = int(time.time())
  63     cur = conn.execute("INSERT INTO PackageBases (Name, SubmittedTS, " +
  64                        "ModifiedTS, SubmitterUID, MaintainerUID) VALUES " +
  65                        "(?, ?, ?, ?, ?)", [pkgbase, now, now, userid, userid])
  66     pkgbase_id = cur.lastrowid
  67
  68     cur = conn.execute("INSERT INTO PackageNotifications " +
  69                        "(PackageBaseID, UserID) VALUES (?, ?)",
  70                        [pkgbase_id, userid])
  71
  72     conn.commit()
  73     conn.close()
  74
  75
  76 def pkgbase_set_keywords(pkgbase, keywords):
  77     pkgbase_id = pkgbase_from_name(pkgbase)
  78     if not pkgbase_id:
  79         die('{:s}: package base not found: {:s}'.format(action, pkgbase))
  80
  81     conn = db.Connection()
  82
  83     conn.execute("DELETE FROM PackageKeywords WHERE PackageBaseID = ?",
  84                  [pkgbase_id])
  85     for keyword in keywords:
  86         conn.execute("INSERT INTO PackageKeywords (PackageBaseID, Keyword) " +
  87                      "VALUES (?, ?)", [pkgbase_id, keyword])
  88
  89     conn.commit()
  90     conn.close()
  91
  92
  93 def pkgbase_has_write_access(pkgbase, user):
  94     conn = db.Connection()
  95
  96     cur = conn.execute("SELECT COUNT(*) FROM PackageBases " +
  97                        "LEFT JOIN PackageComaintainers " +
  98                        "ON PackageComaintainers.PackageBaseID = PackageBases.ID " +
  99                        "INNER JOIN Users " +
 100                        "ON Users.ID = PackageBases.MaintainerUID " +
 101                        "OR PackageBases.MaintainerUID IS NULL " +
 102                        "OR Users.ID = PackageComaintainers.UsersID " +
 103                        "WHERE Name = ? AND Username = ?", [pkgbase, user])
 104     return cur.fetchone()[0] > 0
 105
 106
 107 def die(msg):
 108     sys.stderr.write("{:s}\n".format(msg))
 109     exit(1)
 110
 111
 112 def die_with_help(msg):
 113     die(msg + "\nTry `{:s} help` for a list of commands.".format(ssh_cmdline))
 114
 115
 116 def warn(msg):
 117     sys.stderr.write("warning: {:s}\n".format(msg))
 118
 119
 120 user = os.environ.get('AUR_USER')
 121 privileged = (os.environ.get('AUR_PRIVILEGED', '0') == '1')
 122 ssh_cmd = os.environ.get('SSH_ORIGINAL_COMMAND')
 123 ssh_client = os.environ.get('SSH_CLIENT')
 124
 125 if not ssh_cmd:
 126     die_with_help("Interactive shell is disabled.")
 127 cmdargv = shlex.split(ssh_cmd)
 128 action = cmdargv[0]
 129 remote_addr = ssh_client.split(' ')[0] if ssh_client else None
 130
 131 if enable_maintenance:
 132     if remote_addr not in maintenance_exc:
 133         die("The AUR is down due to maintenance. We will be back soon.")
 134
 135 if action == 'git-upload-pack' or action == 'git-receive-pack':
 136     if len(cmdargv) < 2:
 137         die_with_help("{:s}: missing path".format(action))
 138
 139     path = cmdargv[1].rstrip('/')
 140     if not path.startswith('/'):
 141         path = '/' + path
 142     if not path.endswith('.git'):
 143         path = path + '.git'
 144     pkgbase = path[1:-4]
 145     if not re.match(repo_regex, pkgbase):
 146         die('{:s}: invalid repository name: {:s}'.format(action, pkgbase))
 147
 148     if action == 'git-receive-pack' and pkgbase_exists(pkgbase):
 149         if not privileged and not pkgbase_has_write_access(pkgbase, user):
 150             die('{:s}: permission denied: {:s}'.format(action, user))
 151
 152     os.environ["AUR_USER"] = user
 153     os.environ["AUR_PKGBASE"] = pkgbase
 154     os.environ["GIT_NAMESPACE"] = pkgbase
 155     cmd = action + " '" + repo_path + "'"
 156     os.execl(git_shell_cmd, git_shell_cmd, '-c', cmd)
 157 elif action == 'set-keywords':
 158     if len(cmdargv) < 2:
 159         die_with_help("{:s}: missing repository name".format(action))
 160     pkgbase_set_keywords(cmdargv[1], cmdargv[2:])
 161 elif action == 'list-repos':
 162     if len(cmdargv) > 1:
 163         die_with_help("{:s}: too many arguments".format(action))
 164     list_repos(user)
 165 elif action == 'setup-repo':
 166     if len(cmdargv) < 2:
 167         die_with_help("{:s}: missing repository name".format(action))
 168     if len(cmdargv) > 2:
 169         die_with_help("{:s}: too many arguments".format(action))
 170     warn('{:s} is deprecated. Use `git push` to create new repositories.'.format(action))
 171     create_pkgbase(cmdargv[1], user)
 172 elif action == 'restore':
 173     if len(cmdargv) < 2:
 174         die_with_help("{:s}: missing repository name".format(action))
 175     if len(cmdargv) > 2:
 176         die_with_help("{:s}: too many arguments".format(action))
 177
 178     pkgbase = cmdargv[1]
 179     if not re.match(repo_regex, pkgbase):
 180         die('{:s}: invalid repository name: {:s}'.format(action, pkgbase))
 181
 182     if pkgbase_exists(pkgbase):
 183         die('{:s}: package base exists: {:s}'.format(action, pkgbase))
 184     create_pkgbase(pkgbase, user)
 185
 186     os.environ["AUR_USER"] = user
 187     os.environ["AUR_PKGBASE"] = pkgbase
 188     os.execl(git_update_cmd, git_update_cmd, 'restore')
 189 elif action == 'help':
 190     die("Commands:\n" +
 191         "  help                         Show this help message and exit.\n" +
 192         "  list-repos                   List all your repositories.\n" +
 193         "  restore <name>               Restore a deleted package base.\n" +
 194         "  set-keywords <name> [...]    Change package base keywords.\n" +
 195         "  setup-repo <name>            Create an empty repository.\n" +
 196         "  git-receive-pack             Internal command used with Git.\n" +
 197         "  git-upload-pack              Internal command used with Git.")
 198 else:
 199     die_with_help("invalid command: {:s}".format(action))