Mercurial > hg > mercurial-crew-with-dirclash
comparison contrib/hg-ssh @ 1537:583b3696d24d
Added hg-ssh - a wrapper for ssh access to a limited set of mercurial repos
To be used in ~/.ssh/authorized_keys with the "command" option, see sshd(8):
command="hg-ssh path/to/repo1 /path/to/repo2 ~/repo3 ~user/repo4" ssh-dss ...
(probably together with these other useful options:
no-port-forwarding,no-X11-forwarding,no-agent-forwarding)
This allows pull/push over ssh to to the repositories given as arguments.
If all your repositories are subdirectories of a common directory, you can
allow shorter paths with:
command="cd path/to/my/repositories && hg-ssh repo1 subdir/repo2"
author | Thomas Arendsen Hein <thomas@intevation.de> |
---|---|
date | Sun, 13 Nov 2005 02:06:02 +0100 |
parents | |
children | 9a5b778f7e2d |
comparison
equal
deleted
inserted
replaced
1536:b4ed825282fe | 1537:583b3696d24d |
---|---|
1 #!/usr/bin/env python | |
2 # | |
3 # Copyright 2005 by Intevation GmbH <intevation@intevation.de> | |
4 # Author(s): | |
5 # Thomas Arendsen Hein <thomas@intevation.de> | |
6 # | |
7 # This software may be used and distributed according to the terms | |
8 # of the GNU General Public License, incorporated herein by reference. | |
9 | |
10 """ | |
11 hg-ssh - a wrapper for ssh access to a limited set of mercurial repos | |
12 | |
13 To be used in ~/.ssh/authorized_keys with the "command" option, see sshd(8): | |
14 command="hg-ssh path/to/repo1 /path/to/repo2 ~/repo3 ~user/repo4" ssh-dss ... | |
15 (probably together with these other useful options: | |
16 no-port-forwarding,no-X11-forwarding,no-agent-forwarding) | |
17 | |
18 This allows pull/push over ssh to to the repositories given as arguments. | |
19 | |
20 If all your repositories are subdirectories of a common directory, you can | |
21 allow shorter paths with: | |
22 command="cd path/to/my/repositories && hg-ssh repo1 subdir/repo2" | |
23 """ | |
24 | |
25 from mercurial import commands | |
26 | |
27 import sys, os | |
28 | |
29 cwd = os.getcwd() | |
30 allowed_paths = [os.path.normpath(os.path.join(cwd, os.path.expanduser(path))) | |
31 for path in sys.argv[1:]] | |
32 orig_cmd = os.getenv('SSH_ORIGINAL_COMMAND', '?') | |
33 | |
34 if orig_cmd.startswith('hg -R ') and orig_cmd.endswith(' serve --stdio'): | |
35 path = orig_cmd[6:-14] | |
36 repo = os.path.normpath(os.path.join(cwd, os.path.expanduser(path))) | |
37 if repo in allowed_paths: | |
38 commands.dispatch(['-R', repo, 'serve', '--stdio']) | |
39 else: | |
40 sys.stderr.write("Illegal repository %r\n" % repo) | |
41 sys.exit(-1) | |
42 else: | |
43 sys.stderr.write("Illegal command %r\n" % orig_cmd) | |
44 sys.exit(-1) | |
45 |