1 package Girocco
::Project
;
10 use Girocco
::ProjPerm
;
12 use base
('Girocco::ProjPerm::'.$Girocco::Config
::permission_control
); # mwahaha
15 our $metadata_fields = {
16 homepage
=> ['Homepage URL', 'hp', 'text'],
17 shortdesc
=> ['Short description', 'desc', 'text'],
18 README
=> ['README (HTML, lt 8kb)', 'README', 'textarea'],
23 my @pelems = split('/', $self->{name
});
24 pop @pelems; # do not create dir for the project itself
25 my $path = $self->{base_path
};
26 foreach my $pelem (@pelems) {
28 (-d
"$path") or mkdir $path or die "mkdir $path: $!";
29 chmod 0775, $path; # ok if fails (dir may already exist and be owned by someone else)
36 desc
=> 'description',
37 README
=> 'README.html',
44 $self->{path
}.'/'.$name;
50 $propmap{$name} or die "unknown property: $name";
51 if ($propmap{$name} =~ /^:/) {
52 return `git --git-dir="$self->{path}" config "gitweb.$name"`
55 open P
, $self->_property_path($propmap{$name}) or return undef;
58 my $value = join('', @value); chomp $value;
64 my ($name, $value) = @_;
65 $propmap{$name} or die "unknown property: $name";
67 if ($propmap{$name} =~ /^:/) {
68 return `git --git-dir="$self->{path}" config "gitweb.$name" "$value"`
71 my $P = lock_file
($self->_property_path($propmap{$name}));
72 $value ne '' and print $P "$value\n";
74 unlock_file
($self->_property_path($propmap{$name}));
77 sub _properties_load
{
79 foreach my $prop (keys %propmap) {
80 $self->{$prop} = $self->_property_fget($prop);
84 sub _properties_save
{
86 foreach my $prop (keys %propmap) {
87 $self->_property_fput($prop, $self->{$prop});
93 $self->_property_path('.nofetch');
99 my $np = $self->_nofetch_path;
101 open X
, '>'.$np or die "nofetch failed: $!";
104 unlink $np or die "yesfetch failed: $!";
110 $self->_property_path('.clonelog');
113 sub _clonefail_path
{
115 $self->_property_path('.clone_failed');
120 $self->_property_path('.clone_in_progress');
126 my $np = $self->_clonep_path;
128 open X
, '>'.$np or die "clonep failed: $!";
131 unlink $np or die "clonef failed: $!";
134 sub _alternates_setup
{
136 return unless $self->{name
} =~ m
#/#;
137 my $forkee_name = get_forkee_name
($self->{name
});
138 my $forkee_path = get_forkee_path
($self->{name
});
139 return unless -d
$forkee_path;
140 mkdir $self->{path
}.'/refs'; chmod 0775, $self->{path
}.'/refs';
141 mkdir $self->{path
}.'/objects'; chmod 0775, $self->{path
}.'/objects';
142 mkdir $self->{path
}.'/objects/info'; chmod 0775, $self->{path
}.'/objects/info';
144 # We set up both alternates and http_alternates since we cannot use
145 # relative path in alternates - that doesn't work recursively.
147 my $filename = $self->{path
}.'/objects/info/alternates';
148 open X
, '>'.$filename or die "alternates failed: $!";
149 print X
"$forkee_path/objects\n";
151 chmod 0664, $filename or warn "cannot chmod $filename: $!";
153 if ($Girocco::Config
::httppullurl
) {
154 $filename = $self->{path
}.'/objects/info/http-alternates';
155 open X
, '>'.$filename or die "http-alternates failed: $!";
156 my $upfork = $forkee_name;
157 do { print X
"$Girocco::Config::httppullurl/$upfork.git/objects\n"; } while ($upfork =~ s
#/?.+?$## and $upfork); #
159 chmod 0664, $filename or warn "cannot chmod $filename: $!";
162 symlink "$forkee_path/refs", $self->{path
}.'/refs/forkee';
167 mkdir $self->{path
}.'/ctags'; chmod 01777, $self->{path
}.'/ctags';
173 $xtra .= join(',', @
{$self->{users
}});
174 filedb_atomic_append
(jailed_file
('/etc/group'),
175 join(':', $self->{name
}, $self->{crypt}, '\i', $xtra));
180 my $xtra = join(',', @
{$self->{users
}});
181 filedb_atomic_edit
(jailed_file
('/etc/group'),
185 if ($self->{name
} eq (split /:/)[0]) {
186 # preserve readonly flag
187 s/::([^:]*)$/:$1/ and $xtra = ":$xtra";
188 return join(':', $self->{name
}, $self->{crypt}, $self->{gid
}, $xtra)."\n";
198 filedb_atomic_edit
(jailed_file
('/etc/group'),
200 $self->{name
} ne (split /:/)[0] and return $_;
208 $self->{path
}.'/hooks/'.$name;
214 open SRC
, "$Girocco::Config::basedir/$name-hook" or die "cannot open hook $name: $!";
215 open DST
, '>'.$self->_hook_path($name) or die "cannot open hook $name for writing: $!";
216 while (<SRC
>) { print DST
$_; }
219 chmod 0775, $self->_hook_path($name) or die "cannot chmod hook $name: $!";
224 foreach my $hook ('update') {
225 $self->_hook_install($hook);
229 # private constructor, do not use
232 my ($name, $base_path, $path) = @_;
233 valid_name
($name) or die "refusing to create project with invalid name ($name)!";
234 $path ||= "$base_path/$name.git";
235 my $proj = { name
=> $name, base_path
=> $base_path, path
=> $path };
240 # public constructor #0
241 # creates a virtual project not connected to disk image
242 # you can conjure() it later to disk
245 my ($name, $mirror) = @_;
246 my $self = $class->_new($name, $Girocco::Config
::reporoot
);
248 $self->{mirror
} = $mirror;
252 # public constructor #1
257 open F
, jailed_file
("/etc/group") or die "project load failed: $!";
261 next unless (shift eq $name);
263 my $self = $class->_new($name, $Girocco::Config
::reporoot
);
264 (-d
$self->{path
}) or die "invalid path (".$self->{path
}.") for project ".$self->{name
};
267 ($self->{crypt}, $self->{gid
}, $ulist) = @_;
269 $self->{users
} = [split /,/, $ulist];
270 $self->{orig_users
} = [@
{$self->{users
}}];
271 $self->{mirror
} = ! -e
$self->_nofetch_path;
272 $self->{clone_in_progress
} = -e
$self->_clonep_path;
273 $self->{clone_logged
} = -e
$self->_clonelog_path;
274 $self->{clone_failed
} = -e
$self->_clonefail_path;
275 $self->{ccrypt
} = $self->{crypt};
277 $self->_properties_load;
284 # $proj may not be in sane state if this returns false!
288 my $cgi = $gcgi->cgi;
290 my ($pwd, $pwd2) = ($cgi->param('pwd'), $cgi->param('pwd2'));
291 $pwd ||= ''; $pwd2 ||= ''; # in case passwords are disabled
292 if ($pwd or not $self->{crypt}) {
293 $self->{crypt} = scrypt
($pwd);
296 if ($pwd2 and $pwd ne $pwd2) {
297 $gcgi->err("Our high-paid security consultants have determined that the admin passwords you have entered do not match each other.");
300 $self->{cpwd
} = $cgi->param('cpwd');
302 if ($Girocco::Config
::project_owners
eq 'email') {
303 $self->{email
} = $gcgi->wparam('email');
304 valid_email
($self->{email
})
305 or $gcgi->err("Your email sure looks weird...?");
308 $self->{url
} = $gcgi->wparam('url');
310 valid_repo_url
($self->{url
})
311 or $gcgi->err("Invalid URL. Note that only HTTP and Git protocol is supported. If the URL contains funny characters, contact me.");
314 $self->{desc
} = $gcgi->wparam('desc');
315 length($self->{desc
}) <= 1024
316 or $gcgi->err("<b>Short</b> description length > 1kb!");
318 $self->{README
} = $gcgi->wparam('README');
319 length($self->{README
}) <= 8192
320 or $gcgi->err("README length > 8kb!");
322 $self->{hp
} = $gcgi->wparam('hp');
324 valid_web_url
($self->{hp
})
325 or $gcgi->err("Invalid homepage URL. Note that only HTTP protocol is supported. If the URL contains funny characters, contact me.");
328 # FIXME: Permit only existing users
329 $self->{users
} = [grep { Girocco
::User
::valid_name
($_) } $cgi->param('user')];
331 not $gcgi->err_check;
337 name
=> $self->{name
},
338 email
=> $self->{email
},
340 desc
=> html_esc
($self->{desc
}),
341 README
=> html_esc
($self->{README
}),
343 users
=> $self->{users
},
351 $self->{ccrypt
} or die "Can't authenticate against a project with no password";
352 $self->{cpwd
} ||= '';
353 unless ($self->{ccrypt
} eq crypt($self->{cpwd
}, $self->{ccrypt
})) {
354 $gcgi->err("Your admin password does not match!");
364 $self->_mkdir_forkees;
366 mkdir($self->{path
}) or die "mkdir $self->{path} failed: $!";
367 if ($Girocco::Config
::owning_group
) {
368 my $gid = scalar(getgrnam($Girocco::Config
::owning_group
));
369 chown(-1, $gid, $self->{path
}) or die "chgrp $gid $self->{path} failed: $!";
370 chmod(02775, $self->{path
}) or die "chmod 2775 $self->{path} failed: $!";
372 chmod(02777, $self->{path
}) or die "chmod 2777 $self->{path} failed: $!";
374 system($Girocco::Config
::git_bin
, '--git-dir='.$self->{path
}, 'init', '--bare', '--shared='.$self->shared_mode()) == 0
375 or die "git init $self->{path} failed: $?";
376 system($Girocco::Config
::git_bin
, '--git-dir='.$self->{path
}, 'config', 'receive.denyNonFastforwards', 'false') == 0
377 or die "disabling receive.denyNonFastforwards failed: $?";
378 system($Girocco::Config
::git_bin
, '--git-dir='.$self->{path
}, 'config', 'gc.auto', '0') == 0
379 or die "disabling gc.auto failed: $?";
381 $self->_properties_save;
382 $self->_alternates_setup;
384 $self->_group_add($pushers);
385 $self->_hooks_install;
386 $self->perm_initialize;
406 unlink ($self->_clonefail_path()); # Ignore EEXIST error
409 my $sock = IO
::Socket
::UNIX
->new('/tmp/girocco.cloned') or die "cannot connect to girocco.cloned: $!";
410 $sock->print($self->{name
}.".git\n");
411 # Just ignore reply, we are going to succeed anyway and the I/O
412 # would apparently get quite hairy.
421 $self->_properties_save;
422 $self->_group_update;
424 my @users_add = grep { $a = $_; not scalar grep { $a eq $_ } $self->{orig_users
} } $self->{users
};
425 my @users_del = grep { $a = $_; not scalar grep { $a eq $_ } $self->{users
} } $self->{orig_users
};
426 $self->perm_user_add($_, Girocco
::User
::resolve_uid
($_)) foreach (@users_add);
427 $self->perm_user_del($_, Girocco
::User
::resolve_uid
($_)) foreach (@users_del);
432 sub update_password
{
436 $self->{crypt} = scrypt
($pwd);
437 $self->_group_update;
440 # You can explicitly do this just on a ghost() repository too.
444 if (-d
$self->{path
}) {
445 system('rm', '-rf', $self->{path
}) == 0
446 or die "rm -rf $self->{path} failed: $?";
448 $self->_group_remove;
454 return glob($Girocco::Config
::reporoot
.'/'.$self->{name
}.'/*');
460 sub get_forkee_name
{
462 (m
#^(.*)/.*?$#)[0]; #
464 sub get_forkee_path
{
465 my $forkee = $Girocco::Config
::reporoot
.'/'.get_forkee_name
($_[0]).'.git';
466 -d
$forkee ?
$forkee : '';
471 (not m
#/# or -d get_forkee_path($_)) # will also catch ^/
474 and m
#^[a-zA-Z0-9+./_-]+$#;
479 valid_name
($name) or die "tried to query for project with invalid name $name!";
484 valid_name
($name) or die "tried to query for project with invalid name $name!";
485 (-d
$Girocco::Config
::reporoot
."/$name.git");