Merge branch 'jc/maint-protect-sh-from-ifs' into maint-1.7.11
[git/mjg.git] / builtin / init-db.c
blob0dacb8b79c57cae2b789eb84d7cfbdb1654ba52f
1 /*
2 * GIT - The information manager from hell
4 * Copyright (C) Linus Torvalds, 2005
5 */
6 #include "cache.h"
7 #include "builtin.h"
8 #include "exec_cmd.h"
9 #include "parse-options.h"
11 #ifndef DEFAULT_GIT_TEMPLATE_DIR
12 #define DEFAULT_GIT_TEMPLATE_DIR "/usr/share/git-core/templates"
13 #endif
15 #ifdef NO_TRUSTABLE_FILEMODE
16 #define TEST_FILEMODE 0
17 #else
18 #define TEST_FILEMODE 1
19 #endif
21 static int init_is_bare_repository = 0;
22 static int init_shared_repository = -1;
23 static const char *init_db_template_dir;
24 static const char *git_link;
26 static void safe_create_dir(const char *dir, int share)
28 if (mkdir(dir, 0777) < 0) {
29 if (errno != EEXIST) {
30 perror(dir);
31 exit(1);
34 else if (share && adjust_shared_perm(dir))
35 die(_("Could not make %s writable by group"), dir);
38 static void copy_templates_1(char *path, int baselen,
39 char *template, int template_baselen,
40 DIR *dir)
42 struct dirent *de;
44 /* Note: if ".git/hooks" file exists in the repository being
45 * re-initialized, /etc/core-git/templates/hooks/update would
46 * cause "git init" to fail here. I think this is sane but
47 * it means that the set of templates we ship by default, along
48 * with the way the namespace under .git/ is organized, should
49 * be really carefully chosen.
51 safe_create_dir(path, 1);
52 while ((de = readdir(dir)) != NULL) {
53 struct stat st_git, st_template;
54 int namelen;
55 int exists = 0;
57 if (de->d_name[0] == '.')
58 continue;
59 namelen = strlen(de->d_name);
60 if ((PATH_MAX <= baselen + namelen) ||
61 (PATH_MAX <= template_baselen + namelen))
62 die(_("insanely long template name %s"), de->d_name);
63 memcpy(path + baselen, de->d_name, namelen+1);
64 memcpy(template + template_baselen, de->d_name, namelen+1);
65 if (lstat(path, &st_git)) {
66 if (errno != ENOENT)
67 die_errno(_("cannot stat '%s'"), path);
69 else
70 exists = 1;
72 if (lstat(template, &st_template))
73 die_errno(_("cannot stat template '%s'"), template);
75 if (S_ISDIR(st_template.st_mode)) {
76 DIR *subdir = opendir(template);
77 int baselen_sub = baselen + namelen;
78 int template_baselen_sub = template_baselen + namelen;
79 if (!subdir)
80 die_errno(_("cannot opendir '%s'"), template);
81 path[baselen_sub++] =
82 template[template_baselen_sub++] = '/';
83 path[baselen_sub] =
84 template[template_baselen_sub] = 0;
85 copy_templates_1(path, baselen_sub,
86 template, template_baselen_sub,
87 subdir);
88 closedir(subdir);
90 else if (exists)
91 continue;
92 else if (S_ISLNK(st_template.st_mode)) {
93 char lnk[256];
94 int len;
95 len = readlink(template, lnk, sizeof(lnk));
96 if (len < 0)
97 die_errno(_("cannot readlink '%s'"), template);
98 if (sizeof(lnk) <= len)
99 die(_("insanely long symlink %s"), template);
100 lnk[len] = 0;
101 if (symlink(lnk, path))
102 die_errno(_("cannot symlink '%s' '%s'"), lnk, path);
104 else if (S_ISREG(st_template.st_mode)) {
105 if (copy_file(path, template, st_template.st_mode))
106 die_errno(_("cannot copy '%s' to '%s'"), template,
107 path);
109 else
110 error(_("ignoring template %s"), template);
114 static void copy_templates(const char *template_dir)
116 char path[PATH_MAX];
117 char template_path[PATH_MAX];
118 int template_len;
119 DIR *dir;
120 const char *git_dir = get_git_dir();
121 int len = strlen(git_dir);
123 if (!template_dir)
124 template_dir = getenv(TEMPLATE_DIR_ENVIRONMENT);
125 if (!template_dir)
126 template_dir = init_db_template_dir;
127 if (!template_dir)
128 template_dir = system_path(DEFAULT_GIT_TEMPLATE_DIR);
129 if (!template_dir[0])
130 return;
131 template_len = strlen(template_dir);
132 if (PATH_MAX <= (template_len+strlen("/config")))
133 die(_("insanely long template path %s"), template_dir);
134 strcpy(template_path, template_dir);
135 if (template_path[template_len-1] != '/') {
136 template_path[template_len++] = '/';
137 template_path[template_len] = 0;
139 dir = opendir(template_path);
140 if (!dir) {
141 warning(_("templates not found %s"), template_dir);
142 return;
145 /* Make sure that template is from the correct vintage */
146 strcpy(template_path + template_len, "config");
147 repository_format_version = 0;
148 git_config_from_file(check_repository_format_version,
149 template_path, NULL);
150 template_path[template_len] = 0;
152 if (repository_format_version &&
153 repository_format_version != GIT_REPO_VERSION) {
154 warning(_("not copying templates of "
155 "a wrong format version %d from '%s'"),
156 repository_format_version,
157 template_dir);
158 closedir(dir);
159 return;
162 memcpy(path, git_dir, len);
163 if (len && path[len - 1] != '/')
164 path[len++] = '/';
165 path[len] = 0;
166 copy_templates_1(path, len,
167 template_path, template_len,
168 dir);
169 closedir(dir);
172 static int git_init_db_config(const char *k, const char *v, void *cb)
174 if (!strcmp(k, "init.templatedir"))
175 return git_config_pathname(&init_db_template_dir, k, v);
177 return 0;
180 static int create_default_files(const char *template_path)
182 const char *git_dir = get_git_dir();
183 unsigned len = strlen(git_dir);
184 static char path[PATH_MAX];
185 struct stat st1;
186 char repo_version_string[10];
187 char junk[2];
188 int reinit;
189 int filemode;
191 if (len > sizeof(path)-50)
192 die(_("insane git directory %s"), git_dir);
193 memcpy(path, git_dir, len);
195 if (len && path[len-1] != '/')
196 path[len++] = '/';
199 * Create .git/refs/{heads,tags}
201 safe_create_dir(git_path("refs"), 1);
202 safe_create_dir(git_path("refs/heads"), 1);
203 safe_create_dir(git_path("refs/tags"), 1);
205 /* Just look for `init.templatedir` */
206 git_config(git_init_db_config, NULL);
208 /* First copy the templates -- we might have the default
209 * config file there, in which case we would want to read
210 * from it after installing.
212 copy_templates(template_path);
214 git_config(git_default_config, NULL);
215 is_bare_repository_cfg = init_is_bare_repository;
217 /* reading existing config may have overwrote it */
218 if (init_shared_repository != -1)
219 shared_repository = init_shared_repository;
222 * We would have created the above under user's umask -- under
223 * shared-repository settings, we would need to fix them up.
225 if (shared_repository) {
226 adjust_shared_perm(get_git_dir());
227 adjust_shared_perm(git_path("refs"));
228 adjust_shared_perm(git_path("refs/heads"));
229 adjust_shared_perm(git_path("refs/tags"));
233 * Create the default symlink from ".git/HEAD" to the "master"
234 * branch, if it does not exist yet.
236 strcpy(path + len, "HEAD");
237 reinit = (!access(path, R_OK)
238 || readlink(path, junk, sizeof(junk)-1) != -1);
239 if (!reinit) {
240 if (create_symref("HEAD", "refs/heads/master", NULL) < 0)
241 exit(1);
244 /* This forces creation of new config file */
245 sprintf(repo_version_string, "%d", GIT_REPO_VERSION);
246 git_config_set("core.repositoryformatversion", repo_version_string);
248 path[len] = 0;
249 strcpy(path + len, "config");
251 /* Check filemode trustability */
252 filemode = TEST_FILEMODE;
253 if (TEST_FILEMODE && !lstat(path, &st1)) {
254 struct stat st2;
255 filemode = (!chmod(path, st1.st_mode ^ S_IXUSR) &&
256 !lstat(path, &st2) &&
257 st1.st_mode != st2.st_mode);
259 git_config_set("core.filemode", filemode ? "true" : "false");
261 if (is_bare_repository())
262 git_config_set("core.bare", "true");
263 else {
264 const char *work_tree = get_git_work_tree();
265 git_config_set("core.bare", "false");
266 /* allow template config file to override the default */
267 if (log_all_ref_updates == -1)
268 git_config_set("core.logallrefupdates", "true");
269 if (prefixcmp(git_dir, work_tree) ||
270 strcmp(git_dir + strlen(work_tree), "/.git")) {
271 git_config_set("core.worktree", work_tree);
275 if (!reinit) {
276 /* Check if symlink is supported in the work tree */
277 path[len] = 0;
278 strcpy(path + len, "tXXXXXX");
279 if (!close(xmkstemp(path)) &&
280 !unlink(path) &&
281 !symlink("testing", path) &&
282 !lstat(path, &st1) &&
283 S_ISLNK(st1.st_mode))
284 unlink(path); /* good */
285 else
286 git_config_set("core.symlinks", "false");
288 /* Check if the filesystem is case-insensitive */
289 path[len] = 0;
290 strcpy(path + len, "CoNfIg");
291 if (!access(path, F_OK))
292 git_config_set("core.ignorecase", "true");
295 return reinit;
298 static void create_object_directory(void)
300 const char *object_directory = get_object_directory();
301 int len = strlen(object_directory);
302 char *path = xmalloc(len + 40);
304 memcpy(path, object_directory, len);
306 safe_create_dir(object_directory, 1);
307 strcpy(path+len, "/pack");
308 safe_create_dir(path, 1);
309 strcpy(path+len, "/info");
310 safe_create_dir(path, 1);
312 free(path);
315 int set_git_dir_init(const char *git_dir, const char *real_git_dir,
316 int exist_ok)
318 if (real_git_dir) {
319 struct stat st;
321 if (!exist_ok && !stat(git_dir, &st))
322 die(_("%s already exists"), git_dir);
324 if (!exist_ok && !stat(real_git_dir, &st))
325 die(_("%s already exists"), real_git_dir);
328 * make sure symlinks are resolved because we'll be
329 * moving the target repo later on in separate_git_dir()
331 git_link = xstrdup(real_path(git_dir));
333 else {
334 real_git_dir = real_path(git_dir);
335 git_link = NULL;
337 set_git_dir(real_path(real_git_dir));
338 return 0;
341 static void separate_git_dir(const char *git_dir)
343 struct stat st;
344 FILE *fp;
346 if (!stat(git_link, &st)) {
347 const char *src;
349 if (S_ISREG(st.st_mode))
350 src = read_gitfile(git_link);
351 else if (S_ISDIR(st.st_mode))
352 src = git_link;
353 else
354 die(_("unable to handle file type %d"), (int)st.st_mode);
356 if (rename(src, git_dir))
357 die_errno(_("unable to move %s to %s"), src, git_dir);
360 fp = fopen(git_link, "w");
361 if (!fp)
362 die(_("Could not create git link %s"), git_link);
363 fprintf(fp, "gitdir: %s\n", git_dir);
364 fclose(fp);
367 int init_db(const char *template_dir, unsigned int flags)
369 int reinit;
370 const char *git_dir = get_git_dir();
372 if (git_link)
373 separate_git_dir(git_dir);
375 safe_create_dir(git_dir, 0);
377 init_is_bare_repository = is_bare_repository();
379 /* Check to see if the repository version is right.
380 * Note that a newly created repository does not have
381 * config file, so this will not fail. What we are catching
382 * is an attempt to reinitialize new repository with an old tool.
384 check_repository_format();
386 reinit = create_default_files(template_dir);
388 create_object_directory();
390 if (shared_repository) {
391 char buf[10];
392 /* We do not spell "group" and such, so that
393 * the configuration can be read by older version
394 * of git. Note, we use octal numbers for new share modes,
395 * and compatibility values for PERM_GROUP and
396 * PERM_EVERYBODY.
398 if (shared_repository < 0)
399 /* force to the mode value */
400 sprintf(buf, "0%o", -shared_repository);
401 else if (shared_repository == PERM_GROUP)
402 sprintf(buf, "%d", OLD_PERM_GROUP);
403 else if (shared_repository == PERM_EVERYBODY)
404 sprintf(buf, "%d", OLD_PERM_EVERYBODY);
405 else
406 die("oops");
407 git_config_set("core.sharedrepository", buf);
408 git_config_set("receive.denyNonFastforwards", "true");
411 if (!(flags & INIT_DB_QUIET)) {
412 int len = strlen(git_dir);
415 * TRANSLATORS: The first '%s' is either "Reinitialized
416 * existing" or "Initialized empty", the second " shared" or
417 * "", and the last '%s%s' is the verbatim directory name.
419 printf(_("%s%s Git repository in %s%s\n"),
420 reinit ? _("Reinitialized existing") : _("Initialized empty"),
421 shared_repository ? _(" shared") : "",
422 git_dir, len && git_dir[len-1] != '/' ? "/" : "");
425 return 0;
428 static int guess_repository_type(const char *git_dir)
430 char cwd[PATH_MAX];
431 const char *slash;
434 * "GIT_DIR=. git init" is always bare.
435 * "GIT_DIR=`pwd` git init" too.
437 if (!strcmp(".", git_dir))
438 return 1;
439 if (!getcwd(cwd, sizeof(cwd)))
440 die_errno(_("cannot tell cwd"));
441 if (!strcmp(git_dir, cwd))
442 return 1;
444 * "GIT_DIR=.git or GIT_DIR=something/.git is usually not.
446 if (!strcmp(git_dir, ".git"))
447 return 0;
448 slash = strrchr(git_dir, '/');
449 if (slash && !strcmp(slash, "/.git"))
450 return 0;
453 * Otherwise it is often bare. At this point
454 * we are just guessing.
456 return 1;
459 static int shared_callback(const struct option *opt, const char *arg, int unset)
461 *((int *) opt->value) = (arg) ? git_config_perm("arg", arg) : PERM_GROUP;
462 return 0;
465 static const char *const init_db_usage[] = {
466 "git init [-q | --quiet] [--bare] [--template=<template-directory>] [--shared[=<permissions>]] [directory]",
467 NULL
471 * If you want to, you can share the DB area with any number of branches.
472 * That has advantages: you can save space by sharing all the SHA1 objects.
473 * On the other hand, it might just make lookup slower and messier. You
474 * be the judge. The default case is to have one DB per managed directory.
476 int cmd_init_db(int argc, const char **argv, const char *prefix)
478 const char *git_dir;
479 const char *real_git_dir = NULL;
480 const char *work_tree;
481 const char *template_dir = NULL;
482 unsigned int flags = 0;
483 const struct option init_db_options[] = {
484 OPT_STRING(0, "template", &template_dir, "template-directory",
485 "directory from which templates will be used"),
486 OPT_SET_INT(0, "bare", &is_bare_repository_cfg,
487 "create a bare repository", 1),
488 { OPTION_CALLBACK, 0, "shared", &init_shared_repository,
489 "permissions",
490 "specify that the git repository is to be shared amongst several users",
491 PARSE_OPT_OPTARG | PARSE_OPT_NONEG, shared_callback, 0},
492 OPT_BIT('q', "quiet", &flags, "be quiet", INIT_DB_QUIET),
493 OPT_STRING(0, "separate-git-dir", &real_git_dir, "gitdir",
494 "separate git dir from working tree"),
495 OPT_END()
498 argc = parse_options(argc, argv, prefix, init_db_options, init_db_usage, 0);
500 if (real_git_dir && !is_absolute_path(real_git_dir))
501 real_git_dir = xstrdup(real_path(real_git_dir));
503 if (argc == 1) {
504 int mkdir_tried = 0;
505 retry:
506 if (chdir(argv[0]) < 0) {
507 if (!mkdir_tried) {
508 int saved;
510 * At this point we haven't read any configuration,
511 * and we know shared_repository should always be 0;
512 * but just in case we play safe.
514 saved = shared_repository;
515 shared_repository = 0;
516 switch (safe_create_leading_directories_const(argv[0])) {
517 case -3:
518 errno = EEXIST;
519 /* fallthru */
520 case -1:
521 die_errno(_("cannot mkdir %s"), argv[0]);
522 break;
523 default:
524 break;
526 shared_repository = saved;
527 if (mkdir(argv[0], 0777) < 0)
528 die_errno(_("cannot mkdir %s"), argv[0]);
529 mkdir_tried = 1;
530 goto retry;
532 die_errno(_("cannot chdir to %s"), argv[0]);
534 } else if (0 < argc) {
535 usage(init_db_usage[0]);
537 if (is_bare_repository_cfg == 1) {
538 static char git_dir[PATH_MAX+1];
540 setenv(GIT_DIR_ENVIRONMENT,
541 getcwd(git_dir, sizeof(git_dir)), argc > 0);
544 if (init_shared_repository != -1)
545 shared_repository = init_shared_repository;
548 * GIT_WORK_TREE makes sense only in conjunction with GIT_DIR
549 * without --bare. Catch the error early.
551 git_dir = getenv(GIT_DIR_ENVIRONMENT);
552 work_tree = getenv(GIT_WORK_TREE_ENVIRONMENT);
553 if ((!git_dir || is_bare_repository_cfg == 1) && work_tree)
554 die(_("%s (or --work-tree=<directory>) not allowed without "
555 "specifying %s (or --git-dir=<directory>)"),
556 GIT_WORK_TREE_ENVIRONMENT,
557 GIT_DIR_ENVIRONMENT);
560 * Set up the default .git directory contents
562 if (!git_dir)
563 git_dir = DEFAULT_GIT_DIR_ENVIRONMENT;
565 if (is_bare_repository_cfg < 0)
566 is_bare_repository_cfg = guess_repository_type(git_dir);
568 if (!is_bare_repository_cfg) {
569 const char *git_dir_parent = strrchr(git_dir, '/');
570 if (git_dir_parent) {
571 char *rel = xstrndup(git_dir, git_dir_parent - git_dir);
572 git_work_tree_cfg = xstrdup(real_path(rel));
573 free(rel);
575 if (!git_work_tree_cfg) {
576 git_work_tree_cfg = xcalloc(PATH_MAX, 1);
577 if (!getcwd(git_work_tree_cfg, PATH_MAX))
578 die_errno (_("Cannot access current working directory"));
580 if (work_tree)
581 set_git_work_tree(real_path(work_tree));
582 else
583 set_git_work_tree(git_work_tree_cfg);
584 if (access(get_git_work_tree(), X_OK))
585 die_errno (_("Cannot access work tree '%s'"),
586 get_git_work_tree());
588 else {
589 if (work_tree)
590 set_git_work_tree(real_path(work_tree));
593 set_git_dir_init(git_dir, real_git_dir, 1);
595 return init_db(template_dir, flags);