03508b33a8
- Continuation of https://github.com/go-gitea/gitea/pull/18835 (by @Gusted, so it's fine to change copyright holder to Forgejo). - Add the option to use SSH for push mirrors, this would allow for the deploy keys feature to be used and not require tokens to be used which cannot be limited to a specific repository. The private key is stored encrypted (via the `keying` module) on the database and NEVER given to the user, to avoid accidental exposure and misuse. - CAVEAT: This does require the `ssh` binary to be present, which may not be available in containerized environments, this could be solved by adding a SSH client into forgejo itself and use the forgejo binary as SSH command, but should be done in another PR. - CAVEAT: Mirroring of LFS content is not supported, this would require the previous stated problem to be solved due to LFS authentication (an attempt was made at forgejo/forgejo#2544). - Integration test added. - Resolves #4416
107 lines
1.9 KiB
Go
107 lines
1.9 KiB
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package lfs
|
|
|
|
import (
|
|
"net/url"
|
|
"os"
|
|
"path"
|
|
"path/filepath"
|
|
"strings"
|
|
|
|
"code.gitea.io/gitea/modules/log"
|
|
"code.gitea.io/gitea/modules/util"
|
|
)
|
|
|
|
// DetermineEndpoint determines an endpoint from the clone url or uses the specified LFS url.
|
|
func DetermineEndpoint(cloneurl, lfsurl string) *url.URL {
|
|
if len(lfsurl) > 0 {
|
|
return endpointFromURL(lfsurl)
|
|
}
|
|
return endpointFromCloneURL(cloneurl)
|
|
}
|
|
|
|
func endpointFromCloneURL(rawurl string) *url.URL {
|
|
ep := endpointFromURL(rawurl)
|
|
if ep == nil {
|
|
return ep
|
|
}
|
|
|
|
ep.Path = strings.TrimSuffix(ep.Path, "/")
|
|
|
|
if ep.Scheme == "file" {
|
|
return ep
|
|
}
|
|
|
|
if path.Ext(ep.Path) == ".git" {
|
|
ep.Path += "/info/lfs"
|
|
} else {
|
|
ep.Path += ".git/info/lfs"
|
|
}
|
|
|
|
return ep
|
|
}
|
|
|
|
func endpointFromURL(rawurl string) *url.URL {
|
|
if strings.HasPrefix(rawurl, "/") {
|
|
return endpointFromLocalPath(rawurl)
|
|
}
|
|
|
|
u, err := url.Parse(rawurl)
|
|
if err != nil {
|
|
log.Error("lfs.endpointFromUrl: %v", err)
|
|
return nil
|
|
}
|
|
|
|
switch u.Scheme {
|
|
case "http", "https":
|
|
return u
|
|
case "git":
|
|
u.Scheme = "https"
|
|
return u
|
|
case "ssh":
|
|
u.Scheme = "https"
|
|
u.User = nil
|
|
return u
|
|
case "file":
|
|
return u
|
|
default:
|
|
if _, err := os.Stat(rawurl); err == nil {
|
|
return endpointFromLocalPath(rawurl)
|
|
}
|
|
|
|
log.Error("lfs.endpointFromUrl: unknown url")
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func endpointFromLocalPath(path string) *url.URL {
|
|
var slash string
|
|
if abs, err := filepath.Abs(path); err == nil {
|
|
if !strings.HasPrefix(abs, "/") {
|
|
slash = "/"
|
|
}
|
|
path = abs
|
|
}
|
|
|
|
var gitpath string
|
|
if filepath.Base(path) == ".git" {
|
|
gitpath = path
|
|
path = filepath.Dir(path)
|
|
} else {
|
|
gitpath = filepath.Join(path, ".git")
|
|
}
|
|
|
|
if _, err := os.Stat(gitpath); err == nil {
|
|
path = gitpath
|
|
} else if _, err := os.Stat(path); err != nil {
|
|
return nil
|
|
}
|
|
|
|
path = "file://" + slash + util.PathEscapeSegments(filepath.ToSlash(path))
|
|
|
|
u, _ := url.Parse(path)
|
|
|
|
return u
|
|
}
|