xaizek / rocketgit (License: AGPLv3+) (since 2018-12-09)
Light and fast Git hosting solution suitable to serve both as a hub or as a personal code storage with its tickets, pull requests, API and much more.
Commit 5970fcb677e3443ff96549413df105c9956f0abf

Allow php-fpm to use lock files and to regenerate authorized_keys file
Author: Catalin(ux) M. BOIE
Author date (UTC): 2016-10-04 18:48
Committer name: Catalin(ux) M. BOIE
Committer date (UTC): 2016-10-04 18:48
Parent(s): 08bf46f86137767e4432222475a3ea31034a132a
Signing key:
Tree: 491ddc91478d4d8ceac19332adeafc87dcc7a924
File Lines added Lines deleted
selinux/rocketgit.te.tmpl 8 2
File selinux/rocketgit.te.tmpl changed (mode: 100644) (index 450799e..87bec49)
1 policy_module(rocketgit,1.0.106)
1 policy_module(rocketgit,1.0.112)
2 2
3 3 ######################################## ########################################
4 4 # #
 
... ... files_search_var_lib(rocketgit_t)
39 39 # Allow rocketgit_t to manage .ssh/authorized_keys # Allow rocketgit_t to manage .ssh/authorized_keys
40 40 ssh_manage_home_files(rocketgit_t) ssh_manage_home_files(rocketgit_t)
41 41
42 # Allow apache to write authrorized_keys[.tmp] file(s)
43 allow httpd_t user_home_dir_t:file { create getattr open rename setattr write };
44 userdom_manage_user_home_dirs(httpd_t)
45
42 46 type rocketgit_exec_t; type rocketgit_exec_t;
43 47 domain_entry_file(rocketgit_t, rocketgit_exec_t) domain_entry_file(rocketgit_t, rocketgit_exec_t)
44 48
 
... ... allow httpd_t rocketgit_t:unix_stream_socket connectto;
142 146 type rocketgit_lock_t; type rocketgit_lock_t;
143 147 files_lock_file(rocketgit_lock_t) files_lock_file(rocketgit_lock_t)
144 148 manage_files_pattern(rocketgit_t, rocketgit_lock_t, rocketgit_lock_t) manage_files_pattern(rocketgit_t, rocketgit_lock_t, rocketgit_lock_t)
145 #read_files_pattern(httpd_t, rocketgit_lock_t, rocketgit_lock_t)
146 149 filetrans_pattern(rocketgit_t, rocketgit_lock_t, rocketgit_lock_t, file) filetrans_pattern(rocketgit_t, rocketgit_lock_t, rocketgit_lock_t, file)
150 # we need php-fpm to be able to take locks
151 manage_files_pattern(httpd_t, rocketgit_lock_t, rocketgit_lock_t)
152 filetrans_pattern(httpd_t, rocketgit_lock_t, rocketgit_lock_t, file)
147 153
148 154
149 155 # conf # conf
Hints

Before first commit, do not forget to setup your git environment:
git config --global user.name "your_name_here"
git config --global user.email "your@email_here"

Clone this repository using HTTP(S):
git clone https://code.reversed.top/user/xaizek/rocketgit

Clone this repository using ssh (do not forget to upload a key first):
git clone ssh://rocketgit@code.reversed.top/user/xaizek/rocketgit

You are allowed to anonymously push to this repository.
This means that your pushed commits will automatically be transformed into a pull request:
... clone the repository ...
... make some changes and some commits ...
git push origin master