Age | Commit message (Collapse) | Author | Files | Lines |
|
The previous content of gitolite.conf defined the standard access rules
for normalmode. These are now moved to a new file which will be baked
into the gitolite docker image and not managed by the gitolite-admin
repository.
This will allow for easier management of the normalmode rules via this
git repository (aka, part of the normalmode distribution) and prevent
the need for user intervention and to stomp on gitolite-admin to adopt
new updates. The goal is to give users nearly complete ownership of
their gitolite.conf file.
Added to the gitolite.conf template is a definition for a new @creators
group. The normalmode rules are updated to permit only users from this
group to create and own new wildcard repositories. This allows creating
new users which can only contribute to other's repos (as either a
MAINTAINER or CONTRIBUTOR), or access private repos.
As alluded by the previous paragraph, administrators may define private
repos within gitolite using normalmode. This is done by manually
configuring them in gitolite.conf. This use-case has always been
possible, but has only recently been tested to confirm that the access
restrictions are compatible with the rest of normalmode's operations.
(aka: Nothing is leaked via cgit, and the normalmode access rules don't
break anything). Easing this use-case is another reason for the clean
separation of config files.
Signed-off-by: Malfurious <m@lfurio.us>
|
|
The default gitolite.conf file is now patched in to the gitolite
installation in the docker image. This is so that the intended version
of the file is used in the gitolite-admin repo from the very beginning.
This is made necessary by the decoupling of repo purposes.
Instead of using (literal) 'admin', '%ADMIN' will be substituted with
the actual admin username during `gitolite setup`.
Signed-off-by: Malfurious <m@lfurio.us>
|
|
The repository is being reworked to decouple its roles as normalmode
source and gitolite-admin config. The gitolite-admin repository will be
entirely separate. So there is no need to keep the conf or local
directories around where they are at.
Signed-off-by: Malfurious <m@lfurio.us>
|