cgit with patches for sandboxing using qssb
ce1c7336e5
This makes cgit read all repo-info from the configfile, instead of scanning for possible git-dirs below a common root path. This is primarily done to get better security (separate physical path from logical repo-name). In /etc/cgitrc each repo is registered with the following keys: repo.url repo.name repo.path repo.desc repo.owner Note: *Required keys are repo.url and repo.path, all others are optional *Each occurrence of repo.url starts a new repository registration *Default value for repo.name is taken from repo.url *The value of repo.url cannot contain characters with special meaning for urls (i.e. one of /?%&), while repo.name can contain anything. Example: repo.url=cgit-pub repo.name=cgit/public repo.path=/pub/git/cgit repo.desc=My public cgit repo repo.owner=Lars Hjemli repo.url=cgit-priv repo.name=cgit/private repo.path=/home/larsh/src/cgit/.git repo.desc=My private cgit repo repo.owner=Lars Hjemli Signed-off-by: Lars Hjemli <hjemli@gmail.com> |
||
|---|---|---|
| .gitignore | ||
| cache.c | ||
| cgit.c | ||
| cgit.css | ||
| cgit.h | ||
| cgitrc | ||
| COPYING | ||
| git.h | ||
| html.c | ||
| Makefile | ||
| parsing.c | ||
| README | ||
| shared.c | ||
| ui-commit.c | ||
| ui-diff.c | ||
| ui-log.c | ||
| ui-repolist.c | ||
| ui-shared.c | ||
| ui-summary.c | ||
| ui-tree.c | ||
| ui-view.c | ||
| xdiff.h | ||
cgit - cgi for git
This is an attempt to create a fast web interface for the git scm, using a
builtin cache to decrease server io-pressure.
Installation
$ $EDITOR Makefile
$ make
$ sudo make install
Note: cgit requires the git and xdiff libraries. Currently, the makefile
expects these files to be found in '../git/libgit.a' and '../git/xdiff/lib.a',
where they will be if you have built git from source in a parallell directory.
Runtime configuration
The file /etc/cgitrc is read by cgit before handling a request. A template
cgitrc is shipped with the sources, and all parameters and default values
can be found in this file.
The cache
When cgit is invoked it looks for a cachefile matching the request and
returns it to the client. If no such cachefile exist (or if it has expired),
the content for the request is written into the proper cachefile before the
file is returned.
If the cachefile has expired but cgit is unable to obtain a lock for it, the
stale cachefile is returned to the client. This is done to favour page
throughput over page freshness.
The generated content contains the complete response to the client, including
the http-headers "Modified" and "Expires".