Discussion:
[ale] github
Joey Kelly via Ale
2018-06-05 22:59:08 UTC
Permalink
...but what bothers me is, where are we supposed to go now, and why so
soon?
What, beyond not relying on someone else's free (and proprietary)
service to host your source code or other project infrastructure?
Yes. Not because those two sites were free, but because they were central
sites that everyone knew about and everything of importance in OSS could be
found there. Sure, I can spin up any of a handful of web-enabled git thingies
and self-host them, but that means I'm participating in the re-fracturing of
the open-source universe (surely a part of M$'s plan in eating Github).

...or instead of web-enabled git, I could go back to putting tarballed
releases on my site, just like I did when Freshmeat was alive... that site was
pretty much a listing of software and links to where each project hosted their
stuff, anyway.
--
Joey Kelly
Minister of the Gospel and Linux Consultant
http://joeykelly.net
504-239-6550
_______________________________________________
Ale mailing list
***@ale.org
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Steve Litt via Ale
2018-06-05 00:11:17 UTC
Permalink
On Mon, 04 Jun 2018 19:40:36 -0400
I went ahead last night and pulled down all my data and deleted my
Github account.
Just… no.
Well, if it ain't been said yet, if you have open source code with a
good license and watch your checksums and pull requests, you might be
alright, for a while. But anything proprietary, you're a fool to
stay, and possibly a fool for having put it there in the first place.
...but what bothers me is, where are we supposed to go now, and why
so soon? Dice at Slashdot, along with SourceForge and Freshmeat. We
know they trojanned many SF downloads, and totally killed off
everyone's favorite repo (Freshmeat). Now we have to leave GitHub?
I'm getting a little tired of having to move every time I turn around.
I'm considering hosting my Stylz git repository on my desktop computer,
hopefully in a chroot jail or something like that. I'll have the git
http server so folks can be guided in git clone, and I'll have ssh key
accounts for the few with actual commit rights.

My main concern is I don't know how to do the security.

SteveT

Steve Litt
June 2018 featured book: Twenty Eight Tales of Troubleshooting
http://www.troubleshooters.com/28
Jim Kinney via Ale
2018-06-05 00:46:43 UTC
Permalink
I recommend cut and paste scripts found on the web. Be sure to run them
as root. :-)
I ran a git install for a while. Used ssh for all user login so it was
pretty much just like a standard machine.
All the gui stuff is just web code so the standard setups for user-
supplied text input is typical. Basically treat it like a web app.
Apache/nginx will whine if the perms are wrong for writing to the git
repo so test it before announcing it.
Put it in a VM for easy backup and restore.
I went ahead last night and pulled down all my data and deleted
myGithub account.
Just
 no.
Well, if it ain't been said yet, if you have open source code with
agood license and watch your checksums and pull requests, you might
bealright, for a while. But anything proprietary, you're a fool
tostay, and possibly a fool for having put it there in the first
place.
...but what bothers me is, where are we supposed to go now, and whyso
soon? Dice at Slashdot, along with SourceForge and Freshmeat. Weknow
they trojanned many SF downloads, and totally killed offeveryone's
favorite repo (Freshmeat). Now we have to leave GitHub?I'm getting a
little tired of having to move every time I turn around.
I'm considering hosting my Stylz git repository on my desktop
computer,hopefully in a chroot jail or something like that. I'll have
the githttp server so folks can be guided in git clone, and I'll have
ssh keyaccounts for the few with actual commit rights.
My main concern is I don't know how to do the security.
SteveT
Steve Litt June 2018 featured book: Twenty Eight Tales of
Troubleshootinghttp://www.troubleshooters.com/28
_______________________________________________Ale mailing
ANNOUNCE and SCHOOLS lists athttp://mail.ale.org/mailman/listinfo
--
James P. Kinney III

Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain

http://heretothereideas.blogspot.com/
Jim Kinney via Ale
2018-06-04 15:37:21 UTC
Permalink
I was too busy updating my LinkedIn profile
Is this thing on?I would have expected some kind of comment about MS
buying github.-jt
_______________________________________________Ale mailing
ANNOUNCE and SCHOOLS lists athttp://mail.ale.org/mailman/listinfo
--
James P. Kinney III

Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain

http://heretothereideas.blogspot.com/
Lightner, Jeffrey via Ale
2018-06-04 15:44:22 UTC
Permalink
Ha! I love the LinkedIn emails telling me so many people have viewed my profile. I always assume it is because I’m so handsome.

As noted the sale is not a rumor: http://money.cnn.com/2018/06/04/technology/microsoft-github-acquisition-deal/index.html

In that story, MS claims to have the most content on GitHub anyway.


From: Ale [mailto:ale-***@ale.org] On Behalf Of Jim Kinney via Ale
Sent: Monday, June 04, 2018 11:37 AM
To: James Taylor; Atlanta Linux Enthusiasts
Subject: Re: [ale] github

I was too busy updating my LinkedIn profile

On Mon, 2018-06-04 at 11:26 -0400, James Taylor via Ale wrote:

Is this thing on?

I would have expected some kind of comment about MS buying github.

-jt







James Taylor

678-697-9420

***@eastcobbgroup.com<mailto:***@eastcobbgroup.com>







_______________________________________________

Ale mailing list

***@ale.org<mailto:***@ale.org>

https://mail.ale.org/mailman/listinfo/ale

See JOBS, ANNOUNCE and SCHOOLS lists at

http://mail.ale.org/mailman/listinfo
--
James P. Kinney III



Every time you stop a school, you will have to build a jail. What you

gain at one end you lose at the other. It's like feeding a dog on his

own tail. It won't fatten the dog.

- Speech 11/23/1900 Mark Twain



http://heretothereideas.blogspot.com/
Brian Stanaland via Ale
2018-06-04 16:39:46 UTC
Permalink
Nope. Both GitHub and Microsoft have posted about it now.

https://blog.github.com/2018-06-04-github-microsoft/
https://blogs.microsoft.com/blog/2018/06/04/microsoft-github-empowering-developers/
Post by Lightner, Jeffrey via Ale
Ha! I love the LinkedIn emails telling me so many people have viewed my
profile. I always assume it is because I’m so handsome.
As noted the sale is not a rumor: http://money.cnn.com/2018/06/
04/technology/microsoft-github-acquisition-deal/index.html
In that story, MS claims to have the most content on GitHub anyway.
*Sent:* Monday, June 04, 2018 11:37 AM
*To:* James Taylor; Atlanta Linux Enthusiasts
*Subject:* Re: [ale] github
I was too busy updating my LinkedIn profile
Is this thing on?
I would have expected some kind of comment about MS buying github.
-jt
James Taylor
678-697-9420
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
--
James P. Kinney III
Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.
- Speech 11/23/1900 Mark Twain
http://heretothereideas.blogspot.com/
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
--
"Anyone who has never made a mistake has never tried anything new." -Albert
Einstein
Damon L. Chesser via Ale
2018-06-05 19:00:19 UTC
Permalink
Why?  Why move your stuff?  If your stuff was so good, MS could just
git  update against your opensource project anyway.  Github was totally
for profit.  what am I missing here?
I went ahead last night and pulled down all my data and deleted my Github account.
Just… no.
Tory
We're all looking at GitLab...
Is this thing on?
I would have expected some kind of comment about MS buying github.
-jt
James Taylor
678-697-9420
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
--
***@damtek.com
404-271-8699

_______________________________________________
Ale mailing list
***@ale.org
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman
Leam Hall via Ale
2018-06-05 19:14:25 UTC
Permalink
I'm still on the fence on this. Yes, GitHub has the right to sell to MS,
and it's a business. Sell to the highest bidder.

The issue of version control is less of an issue for me. That is, yes
it's an issue but you can run git locally. I liked GitHub because I
could collaborate with others on code and point to my repositories as
part of my resume. Of course, there was the "have a current copy
off-site" thing as well.

Open Source business models still need business. Most, if not all, of
the "free" apps are funded by Venture Capital in the hopes of one day
being sold. Compute power and bandwidth cost, who pays for free stuff?

I looked at GitLab a little, last year. My head still doesn't see "Ruby
on Rails" and "Security" happening in the same conversation. Even as
much as I like Ruby.

Leam
Post by Damon L. Chesser via Ale
Why?  Why move your stuff?  If your stuff was so good, MS could just
git  update against your opensource project anyway.  Github was totally
for profit.  what am I missing here?
I went ahead last night and pulled down all my data and deleted my Github account.
Just… no.
Tory
We're all looking at GitLab...
Is this thing on?
I would have expected some kind of comment about MS buying github.
-jt
James Taylor
678-697-9420
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Steve Litt via Ale
2018-06-08 04:24:16 UTC
Permalink
On Tue, 5 Jun 2018 15:14:25 -0400
Post by Leam Hall via Ale
I'm still on the fence on this. Yes, GitHub has the right to sell to
MS, and it's a business. Sell to the highest bidder.
They absolutely have a right to sell to the highest bidder, regardless
of the damage you can expect that bidder to do. And we have the right
to vote with our pocketbooks and feet, and go elsewhere, because any
time Microsoft *can* do harm, they *do* do harm.

And Solomon said it best: Why rely on someone else to host your
project's source code, just because they don't directly charge you
money? Why not host your own. We could even start a co-op advertising
each others' personally run repos, to get the visibility we lose from
walking away from GitHub.
Post by Leam Hall via Ale
The issue of version control is less of an issue for me. That is, yes
it's an issue but you can run git locally. I liked GitHub because I
could collaborate with others on code
Still can, in many ways. If there are just a few others, a few ssh keys
do the job.
Post by Leam Hall via Ale
and point to my repositories as
part of my resume.
You can do that with your personal repos whose git server serves them
up read-only on the web.
Post by Leam Hall via Ale
Of course, there was the "have a current copy
off-site" thing as well.
I back up to a backup server, and maybe six times a year burn a backup
on the backup server to Blu-Ray, and put the Blu-Ray in a safe deposit
box. And with something as un-secretive as your Git repos, you could
just have a trusted buddy across the country allow you in via your
public ssh key, and after he git-clones you, you can keep pushing the
latest and greatest to his backup git.

SteveT

Steve Litt
June 2018 featured book: Twenty Eight Tales of Troubleshooting
http://www.troubleshooters.com/28


_______________________________________________
Ale mailing list
***@ale.org
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Boris Borisov via Ale
2018-06-05 21:19:20 UTC
Permalink
I'm still waiting for next round :)
Which Microsoft product have you used where the terms of use were
exactly what you wanted, 100%? You know it is coming, right?
Will you have time to read it AND understand it when it does?
MSFT has a long history of claiming 1 thing and doing something else. If
you've never been negatively impacted, you are in the minority.
Why? Why move your stuff? If your stuff was so good, MS could just
git update against your opensource project anyway. Github was totally
for profit. what am I missing here?
I went ahead last night and pulled down all my data and deleted my Github account.
Just
 no.
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Steve Litt via Ale
2018-06-08 03:12:19 UTC
Permalink
On Tue, 5 Jun 2018 15:00:19 -0400
Post by Damon L. Chesser via Ale
Why?  Why move your stuff?  If your stuff was so good, MS could just
git  update against your opensource project anyway.  Github was
totally for profit.  what am I missing here?
It's just bad business and risky to involve yourself with a basically
evil corporation like Microsoft. What are the exact risks? I don't
know, and by the time I *do* know, it's too late.

On general principles, I don't associate with dope dealers or bicycle
thieves. Same goes for Microsoft.

SteveT

Steve Litt
June 2018 featured book: Twenty Eight Tales of Troubleshooting
http://www.troubleshooters.com/28


_______________________________________________
Ale mailing list
***@ale.org
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://ma
DJ-Pfulio via Ale
2018-06-05 08:57:59 UTC
Permalink
Microsoft asked to "Judge us by our actions."

That is exactly the point. Things are connected.

Everyone with a project hosted on any Microsoft platform should judge
them by their actions. A few things to consider:
* BSA treating customers like criminals
* MSFT funding lawsuits against Linux
* Internet Explorer anti-trust lawsuits
* Windows 10 EULA
* Windows 10 forcing home automatic patching
* Nokia destruction from inside
* Skype (centralization)
* Bing / MSNBC
* Many more ...

Things are connected and actions matter. Both theirs AND ours.
Is this thing on?
I would have expected some kind of comment about MS buying github.
-jt
_______________________________________________
Ale mailing list
***@ale.org
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Charles Shapiro via Ale
2018-06-04 15:31:05 UTC
Permalink
You mean like this (
https://thenextweb.com/dd/2018/06/04/devs-are-flooding-to-gitlab-amidst-github-microsoft-acquisition-rumors/
) ?
Is this thing on?
I would have expected some kind of comment about MS buying github.
-jt
James Taylor
678-697-9420
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Joey Kelly via Ale
2018-06-04 23:45:05 UTC
Permalink
Post by Charles Shapiro via Ale
You mean like this (
https://thenextweb.com/dd/2018/06/04/devs-are-flooding-to-gitlab-amidst-gith
ub-microsoft-acquisition-rumors/ ) ?
It's not a free service, and I won't trust random news sites telling me where
I ought to herd next, anyhow. I'm sure this'll all be discussed in all the
usual open-source communities and we'll all get the word legitimately. I'm
going to try asking ESR about it at SELF, if given the chance.
--
Joey Kelly
Minister of the Gospel and Linux Consultant
http://joeykelly.net
504-239-6550
_______________________________________________
Ale mailing list
***@ale.org
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Kyle Brieden via Ale
2018-06-05 17:38:02 UTC
Permalink
GitLab is 100% open source and free to use. In fact, even their
business dealings are open source. You can see their internal
discussions in their issue tracker on gitlab.com. They even have a pay
calculator that's public. Everyone is paid based on that pay
calculator, so everyone knows what everyone else is being paid, etc...

They're growing and going through pains as their traffic surges 100x or
more right now, but they're a damn good product and very well known.
It's not just some random bullshit news blog clucking on about some
project their brother started in his basement on his old P3 because he
had an idea and "probably OK hardware" laying around.



---
Very respectfully,
Kyle Brieden
Post by Joey Kelly via Ale
Post by Charles Shapiro via Ale
You mean like this (
https://thenextweb.com/dd/2018/06/04/devs-are-flooding-to-gitlab-amidst-gith
ub-microsoft-acquisition-rumors/ ) ?
It's not a free service, and I won't trust random news sites telling me where
I ought to herd next, anyhow. I'm sure this'll all be discussed in all the
usual open-source communities and we'll all get the word legitimately. I'm
going to try asking ESR about it at SELF, if given the chance.
Chuck Payne via Ale
2018-06-04 15:33:16 UTC
Permalink
Charles,

It not a rumor.
You mean like this ( https://thenextweb.com/dd/
2018/06/04/devs-are-flooding-to-gitlab-amidst-github-
microsoft-acquisition-rumors/ ) ?
Is this thing on?
I would have expected some kind of comment about MS buying github.
-jt
James Taylor
678-697-9420
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
--
Terror PUP a.k.a
Chuck "PUP" Payne
-----------------------------------------
Discover it! Enjoy it! Share it! openSUSE Linux.
-----------------------------------------
openSUSE -- Terrorpup
openSUSE Ambassador/openSUSE Member
skype,twiiter,identica,friendfeed -- terrorpup
freenode(irc) --terrorpup/lupinstein
Register Linux Userid: 155363

Have you tried SUSE Studio? Need to create a Live CD, an app you want to
package and distribute , or create your own linux distro. Give SUSE Studio
a try.
Boris Borisov via Ale
2018-06-04 21:15:06 UTC
Permalink
Money talks ...
https://monitor.gitlab.net/dashboard/db/github-importer?orgId=1
I'm curious whether Linus will continue using it to host the Linux
repository. Beyond that, I'm anticipating a pretty substantial exodus. I
guess we'll see.
<snipped>
--
Be who you are and say what you feel, because those who mind don’t
matter and those who matter don’t mind.
-Dr. Seuss
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
--
Sent from Gmail Mobile
Jim Kinney via Ale
2018-06-05 11:49:10 UTC
Permalink
Gitolite. Thanks!! I didn't know the depth and breadth of its perigree - used at kernel.org, KDE, and Fedora Project.

1. Gitolite
2. ????
3. Profit!!
...but what bothers me is, where are we supposed to go now, and why
so soon?
What, beyond not relying on someone else's free (and proprietary)
service to host your source code or other project infrastructure?
I set up a simple gitolite (+cgit) instance of my own back in 2008.
Still going strong..
- Solomon
--
Solomon Peachy pizza at shaftnet dot org
Coconut Creek, FL ^^ (email/xmpp) ^^
Quidquid latine dictum sit, altum videtur.
--
Sent from my Android device with K-9 Mail. All tyopes are thumb related and reflect authenticity.
Ben Coleman via Ale
2018-06-05 17:00:16 UTC
Permalink
What, beyond not relying on someone else's free (and proprietary)
service to host your source code or other project infrastructure?
I set up a simple gitolite (+cgit) instance of my own back in 2008.
Yup. For work, I've got gitolite set up, plus Redmine for issue
tracking, etc. Also a gitolite instance for personal stuff.

Ben
--
Ben Coleman ***@benshome.net | For the wise man, doing right trumps
http://oloryn.benshome.net/ | looking right. For the fool, looking
Amateur Radio NJ8J | right trumps doing right.
Solomon Peachy via Ale
2018-06-04 17:46:34 UTC
Permalink
I'm curious whether Linus will continue using it to host the Linux
repository. Beyond that, I'm anticipating a pretty substantial exodus. I
guess we'll see.
Linus and the majority of the other core kernel folks/subsystems have
their repos on kernel.org, not github. That said, there are probably
countless mirrors to be found on github.

- Solomon
--
Solomon Peachy pizza at shaftnet dot org
Coconut Creek, FL ^^ (email/xmpp) ^^
Quidquid latine dictum sit, altum videtur.
Chuck Payne via Ale
2018-06-05 23:13:49 UTC
Permalink
https://www.tecmint.com/github-alternatives-to-host-open-source-projects/
Post by Joey Kelly via Ale
...but what bothers me is, where are we supposed to go now, and why so
soon?
What, beyond not relying on someone else's free (and proprietary)
service to host your source code or other project infrastructure?
Yes. Not because those two sites were free, but because they were central
sites that everyone knew about and everything of importance in OSS could be
found there. Sure, I can spin up any of a handful of web-enabled git thingies
and self-host them, but that means I'm participating in the re-fracturing of
the open-source universe (surely a part of M$'s plan in eating Github).
...or instead of web-enabled git, I could go back to putting tarballed
releases on my site, just like I did when Freshmeat was alive... that site was
pretty much a listing of software and links to where each project hosted their
stuff, anyway.
--
Joey Kelly
Minister of the Gospel and Linux Consultant
http://joeykelly.net
504-239-6550
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
--
Terror PUP a.k.a
Chuck "PUP" Payne
-----------------------------------------
Discover it! Enjoy it! Share it! openSUSE Linux.
-----------------------------------------
openSUSE -- Terrorpup
openSUSE Ambassador/openSUSE Member
skype,twiiter,identica,friendfeed -- terrorpup
freenode(irc) --terrorpup/lupinstein
Register Linux Userid: 155363

Have you tried SUSE Studio? Need to create a Live CD, an app you want to
package and distribute , or create your own linux distro. Give SUSE Studio
a try.
Steve Litt via Ale
2018-06-08 03:08:41 UTC
Permalink
On Tue, 5 Jun 2018 06:32:49 -0400
I set up a simple gitolite (+cgit) instance of my own back in 2008.
Still going strong..
Solomon,

I'd like to do something like this.

Did you set it up in your house or office, or on a remote commercial
ISP via VM or shared? I'd like to do this, but I have absolutely no
confidence in my security abilities.

Would you say that gitolite is, inherantly, more secure or less secure
than providing read-only access via git's provided server, and write
via ssh keys requiring passwords?

Thanks,

SteveT

Steve Litt
June 2018 featured book: Twenty Eight Tales of Troubleshooting
http://www.troubleshooters.com/28


_______________________________________________
Ale mailing list
***@ale.org
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Solomon Peachy via Ale
2018-06-08 11:33:39 UTC
Permalink
Post by Steve Litt via Ale
Did you set it up in your house or office, or on a remote commercial
ISP via VM or shared? I'd like to do this, but I have absolutely no
confidence in my security abilities.
I have my nearly 5GB instance running natively on the same Fedora-based
shell server that hosts the entirety of my online presence. It's
sitting in a closet at home, with Comcast Business providing the pipe,
RAID1 storage, nightly backups, and a UPS keeping FPL's worst tendencies
at bay.

I've previously hosted gitolite instances on $5/mo VPS hosts too; it's
fairly light with respect to resource usage.
Post by Steve Litt via Ale
Would you say that gitolite is, inherantly, more secure or less secure
than providing read-only access via git's provided server, and write
via ssh keys requiring passwords?
That's basically how gitolite works, although you can overlay much finer
grain control than raw ssh access would otherwise allow. The gitolite
instructions are comprehansive, and should be able to get you to
whatever configuration you want.

The way I have it configured, access to private repos, and write access
to any repo, requires use of git-via-ssh, which in turn requires an ssh
keypair. That said, most of what I have hosted is public, with the
standard 'git' daemon and cgit given permission (via gitolite) to expose
read-only access without any authentication.

Private repos are either for my personal use (eg I have a repo that
consists entirely of documentation supplied to me under NDA, and another
that hosts my gpg-encrypted password database) or for working trees for
my commercial clients.

I can go into more detail (and post snippets of my configuration) if
you'd like.

I keep meaning to set up something fancier or more integrated (eg
gitlab, gogs, or pagure) but I can't justify it for my own needs. BTW,
I have plenty of resources here and can easlily host more stuff, but I
can't claim to be any more inherently trustworthy/reputable than the
likes of gitlab/whatever... and then there's the problem of Southern
Florida's attractiveness to hurricanes.

- Solomon
--
Solomon Peachy pizza at shaftnet dot org
Coconut Creek, FL ^^ (email/xmpp) ^^
Quidquid latine dictum sit, altum videtur.
Boris Borisov via Ale
2018-06-27 22:04:00 UTC
Permalink
Just that popped up in hackaday site.

https://hackaday.com/2018/06/27/keep-it-close-a-private-git-server-crash-course/
Post by Solomon Peachy via Ale
Post by Steve Litt via Ale
Did you set it up in your house or office, or on a remote commercial
ISP via VM or shared? I'd like to do this, but I have absolutely no
confidence in my security abilities.
I have my nearly 5GB instance running natively on the same Fedora-based
shell server that hosts the entirety of my online presence. It's
sitting in a closet at home, with Comcast Business providing the pipe,
RAID1 storage, nightly backups, and a UPS keeping FPL's worst tendencies
at bay.
I've previously hosted gitolite instances on $5/mo VPS hosts too; it's
fairly light with respect to resource usage.
Post by Steve Litt via Ale
Would you say that gitolite is, inherantly, more secure or less secure
than providing read-only access via git's provided server, and write
via ssh keys requiring passwords?
That's basically how gitolite works, although you can overlay much finer
grain control than raw ssh access would otherwise allow. The gitolite
instructions are comprehansive, and should be able to get you to
whatever configuration you want.
The way I have it configured, access to private repos, and write access
to any repo, requires use of git-via-ssh, which in turn requires an ssh
keypair. That said, most of what I have hosted is public, with the
standard 'git' daemon and cgit given permission (via gitolite) to expose
read-only access without any authentication.
Private repos are either for my personal use (eg I have a repo that
consists entirely of documentation supplied to me under NDA, and another
that hosts my gpg-encrypted password database) or for working trees for
my commercial clients.
I can go into more detail (and post snippets of my configuration) if
you'd like.
I keep meaning to set up something fancier or more integrated (eg
gitlab, gogs, or pagure) but I can't justify it for my own needs. BTW,
I have plenty of resources here and can easlily host more stuff, but I
can't claim to be any more inherently trustworthy/reputable than the
likes of gitlab/whatever... and then there's the problem of Southern
Florida's attractiveness to hurricanes.
- Solomon
--
Solomon Peachy pizza at shaftnet dot org
Coconut Creek, FL ^^ (email/xmpp) ^^
Quidquid latine dictum sit, altum videtur.
_______________________________________________
Ale mailing list
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
Leam Hall via Ale
2018-07-13 10:00:59 UTC
Permalink
Has anyone tried Fossil? It's the dvcs used for SQLite.

https://fossil-scm.org/fossil/doc/trunk/www/fossil-v-git.wiki
_______________________________________________
Ale mailing list
***@ale.org
https://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo

Continue reading on narkive:
Loading...