保护 Git 存储库
我有一个共享托管包，并且我已经从源代码安装了 git。我创建了一个存储库并打算创建更多存储库，但我想知道是否有任何方法可以保护 git 存储库。目前我通过常规 http 访问它。我确实有一个共享 SSL 证书，但我很确定它在这里用不上。
编辑：通过安全，我的意思是经过身份验证，而不是加密。
I have a shared hosting package and I have installed git from source. I created a repo and intend to create a couple more, but I was wondering if there is any way to secure the git repository. Currently I access it over regular http. I do have a shared SSL cert, but I'm pretty sure that won't be of use here.
Edit: by secure, I mean authenticated, not encrypted.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
您可以使用 gitosis 通过 ssh 身份验证配置细粒度的存储库权限。但是，gitosis 需要一个单独的用户帐户，因为它会接管该帐户的
~/.ssh/authorized_keys；单独的帐户也使其更加安全。编辑：
gitolite 不需要单独的用户帐户。这是教程。
You can use gitosis to configure fine-grained repository permissions with ssh authentication. However, gitosis needs a separate user account because it takes over that account's
~/.ssh/authorized_keys; the separate account also makes it more secure.Edit:
gitolite doesn't need a separate user account. Here is the tutorial.
如果是http的话，直接用http服务器认证不行吗？即.htaccess
If it's http, can you not just use the http server authetication? i.e. .htaccess
你说的是“已验证”。好吧，如果您真的就是这个意思，那么 SSH（即使有密码访问）就足够了。如果其他人无法访问您的服务器 shell 帐户，那么您就是安全的。
如果您除了身份验证之外还需要授权，则需要 gitolite。也就是说，在 sshd（或 httpd，如果您使用 git-http-backend）对用户进行身份验证后，您希望授权用户仅访问他/她应该访问的存储库。
你最初的问题中没有任何内容表明你需要这样做，而且我怀疑普通的 SSH 访问对你来说就足够了。喜欢：
You said "authenticated". Well, if you really meant just that, then SSH (even with password access) is good enough. If no one else has access to your server shell account, you're safe.
You need gitolite if you need authorisation in addition to authentication. That is, after sshd (or httpd, if you use git-http-backend) have authenticated the user, you then want to authorise the user to only the repos he/she should have access to.
Nothing in your original question indicates you need that, and I suspect plain SSH access will be good enough for you. Like: