comparison contrib/hg-ssh @ 1537:583b3696d24d

Added hg-ssh - a wrapper for ssh access to a limited set of mercurial repos To be used in ~/.ssh/authorized_keys with the "command" option, see sshd(8): command="hg-ssh path/to/repo1 /path/to/repo2 ~/repo3 ~user/repo4" ssh-dss ... (probably together with these other useful options: no-port-forwarding,no-X11-forwarding,no-agent-forwarding) This allows pull/push over ssh to to the repositories given as arguments. If all your repositories are subdirectories of a common directory, you can allow shorter paths with: command="cd path/to/my/repositories && hg-ssh repo1 subdir/repo2"
author Thomas Arendsen Hein <thomas@intevation.de>
date Sun, 13 Nov 2005 02:06:02 +0100
parents
children 9a5b778f7e2d
comparison
equal deleted inserted replaced
1536:b4ed825282fe 1537:583b3696d24d
1 #!/usr/bin/env python
2 #
3 # Copyright 2005 by Intevation GmbH <intevation@intevation.de>
4 # Author(s):
5 # Thomas Arendsen Hein <thomas@intevation.de>
6 #
7 # This software may be used and distributed according to the terms
8 # of the GNU General Public License, incorporated herein by reference.
9
10 """
11 hg-ssh - a wrapper for ssh access to a limited set of mercurial repos
12
13 To be used in ~/.ssh/authorized_keys with the "command" option, see sshd(8):
14 command="hg-ssh path/to/repo1 /path/to/repo2 ~/repo3 ~user/repo4" ssh-dss ...
15 (probably together with these other useful options:
16 no-port-forwarding,no-X11-forwarding,no-agent-forwarding)
17
18 This allows pull/push over ssh to to the repositories given as arguments.
19
20 If all your repositories are subdirectories of a common directory, you can
21 allow shorter paths with:
22 command="cd path/to/my/repositories && hg-ssh repo1 subdir/repo2"
23 """
24
25 from mercurial import commands
26
27 import sys, os
28
29 cwd = os.getcwd()
30 allowed_paths = [os.path.normpath(os.path.join(cwd, os.path.expanduser(path)))
31 for path in sys.argv[1:]]
32 orig_cmd = os.getenv('SSH_ORIGINAL_COMMAND', '?')
33
34 if orig_cmd.startswith('hg -R ') and orig_cmd.endswith(' serve --stdio'):
35 path = orig_cmd[6:-14]
36 repo = os.path.normpath(os.path.join(cwd, os.path.expanduser(path)))
37 if repo in allowed_paths:
38 commands.dispatch(['-R', repo, 'serve', '--stdio'])
39 else:
40 sys.stderr.write("Illegal repository %r\n" % repo)
41 sys.exit(-1)
42 else:
43 sys.stderr.write("Illegal command %r\n" % orig_cmd)
44 sys.exit(-1)
45