1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
package git
import (
"context"
"errors"
"fmt"
"strconv"
"github.com/golang/protobuf/jsonpb"
"gitlab.com/gitlab-org/gitaly/internal/config"
"gitlab.com/gitlab-org/gitaly/internal/git/hooks"
"gitlab.com/gitlab-org/gitaly/internal/gitlabshell"
"gitlab.com/gitlab-org/gitaly/internal/metadata/featureflag"
"gitlab.com/gitlab-org/gitaly/internal/praefect/metadata"
"gitlab.com/gitlab-org/gitaly/proto/go/gitalypb"
)
// ReceivePackRequest abstracts away the different requests that end up
// spawning git-receive-pack.
type ReceivePackRequest interface {
GetGlId() string
GetGlUsername() string
GetGlRepository() string
GetRepository() *gitalypb.Repository
}
var jsonpbMarshaller = &jsonpb.Marshaler{}
// ReceivePackHookEnv is information we pass down to the Git hooks during
// git-receive-pack.
func ReceivePackHookEnv(ctx context.Context, req ReceivePackRequest) ([]string, error) {
repo, err := jsonpbMarshaller.MarshalToString(req.GetRepository())
if err != nil {
return nil, err
}
gitlabshellEnv, err := gitlabshell.Env()
if err != nil {
return nil, err
}
env := append([]string{
fmt.Sprintf("GL_ID=%s", req.GetGlId()),
fmt.Sprintf("GL_USERNAME=%s", req.GetGlUsername()),
fmt.Sprintf("GL_REPOSITORY=%s", req.GetGlRepository()),
fmt.Sprintf("GL_PROJECT_PATH=%s", req.GetRepository().GetGlProjectPath()),
fmt.Sprintf("GITALY_SOCKET=" + config.GitalyInternalSocketPath()),
fmt.Sprintf("GITALY_REPO=%s", repo),
fmt.Sprintf("GITALY_TOKEN=%s", config.Config.Auth.Token),
fmt.Sprintf("%s=%s", featureflag.GoUpdateHookEnvVar, strconv.FormatBool(featureflag.IsEnabled(ctx, featureflag.GoUpdateHook))),
fmt.Sprintf("%s=%s", featureflag.GoPreReceiveHookEnvVar, strconv.FormatBool(featureflag.IsEnabled(ctx, featureflag.GoPreReceiveHook))),
}, gitlabshellEnv...)
transaction, err := metadata.ExtractTransaction(ctx)
if err == nil {
praefect, err := metadata.PraefectFromContext(ctx)
if err != nil {
return nil, err
}
praefectEnv, err := praefect.Env()
if err != nil {
return nil, err
}
transactionEnv, err := transaction.Env()
if err != nil {
return nil, err
}
env = append(env, praefectEnv, transactionEnv)
} else if !errors.Is(err, metadata.ErrTransactionNotFound) {
return nil, err
}
return env, nil
}
// ReceivePackConfig contains config options we want to enforce when
// receiving a push with git-receive-pack.
func ReceivePackConfig() []Option {
return []Option{
ValueFlag{"-c", fmt.Sprintf("core.hooksPath=%s", hooks.Path())},
// In case the repository belongs to an object pool, we want to prevent
// Git from including the pool's refs in the ref advertisement. We do
// this by rigging core.alternateRefsCommand to produce no output.
// Because Git itself will append the pool repository directory, the
// command ends with a "#". The end result is that Git runs `/bin/sh -c 'exit 0 # /path/to/pool.git`.
ValueFlag{"-c", "core.alternateRefsCommand=exit 0 #"},
// In the past, there was a bug in git that caused users to
// create commits with invalid timezones. As a result, some
// histories contain commits that do not match the spec. As we
// fsck received packfiles by default, any push containing such
// a commit will be rejected. As this is a mostly harmless
// issue, we add the following flag to ignore this check.
ValueFlag{"-c", "receive.fsck.badTimezone=ignore"},
}
}
|
