|
1 #!/usr/bin/env python |
|
2 # |
|
3 # Copyright 2005 by Intevation GmbH <intevation@intevation.de> |
|
4 # Author(s): |
|
5 # Thomas Arendsen Hein <thomas@intevation.de> |
|
6 # |
|
7 # This software may be used and distributed according to the terms |
|
8 # of the GNU General Public License, incorporated herein by reference. |
|
9 |
|
10 """ |
|
11 hg-ssh - a wrapper for ssh access to a limited set of mercurial repos |
|
12 |
|
13 To be used in ~/.ssh/authorized_keys with the "command" option, see sshd(8): |
|
14 command="hg-ssh path/to/repo1 /path/to/repo2 ~/repo3 ~user/repo4" ssh-dss ... |
|
15 (probably together with these other useful options: |
|
16 no-port-forwarding,no-X11-forwarding,no-agent-forwarding) |
|
17 |
|
18 This allows pull/push over ssh to to the repositories given as arguments. |
|
19 |
|
20 If all your repositories are subdirectories of a common directory, you can |
|
21 allow shorter paths with: |
|
22 command="cd path/to/my/repositories && hg-ssh repo1 subdir/repo2" |
|
23 """ |
|
24 |
|
25 from mercurial import commands |
|
26 |
|
27 import sys, os |
|
28 |
|
29 cwd = os.getcwd() |
|
30 allowed_paths = [os.path.normpath(os.path.join(cwd, os.path.expanduser(path))) |
|
31 for path in sys.argv[1:]] |
|
32 orig_cmd = os.getenv('SSH_ORIGINAL_COMMAND', '?') |
|
33 |
|
34 if orig_cmd.startswith('hg -R ') and orig_cmd.endswith(' serve --stdio'): |
|
35 path = orig_cmd[6:-14] |
|
36 repo = os.path.normpath(os.path.join(cwd, os.path.expanduser(path))) |
|
37 if repo in allowed_paths: |
|
38 commands.dispatch(['-R', repo, 'serve', '--stdio']) |
|
39 else: |
|
40 sys.stderr.write("Illegal repository %r\n" % repo) |
|
41 sys.exit(-1) |
|
42 else: |
|
43 sys.stderr.write("Illegal command %r\n" % orig_cmd) |
|
44 sys.exit(-1) |
|
45 |