>> darcs to get more widespread. Wow, why has no one done this already? :-)
>
> It has already been started, but i'm not sure how usable the client and
> server described in
> http://thread.gmane.org/gmane.comp.version-control.darcs.user/8926
> are.

Thanks for the link -- I checked it out and it looks indeed "alpha", but
it surely shows clearly how this can be done! I think we can easily
extend darcs a bit to make it able to push to a cgi script. Furthermore,
I think that the server side cgi script should be written in perl or
php -- this would remove further dependencies on the server provider.

For most people, this would mean that if you have a web account that
can run CGI scripts, you can run a darcs server! The only dependency
is that you need a darcs binary that is already compiled for the
server platform (you could put that in your cgi directory so that
the cgi script can apply its patches). 

I am not sure how to deal with signed patches since it would require
gnupg which might not be available on the server. Perhaps we could 
send over a user name and password that is simply checked
by the cgi script against a list of known user names and passwords.
I wonder if we should use https:// to send passwords?

I also wonder if it is possible to modify the darcs push command,
since that requires darcs to send a whole bunch of patches.

Thanks for all the help and comments, I hope someone here gets
inspired to implement such CGI based darcs server that can be used
by the community. I also envision that this could be integrated with
the scripts to view repositories on the server.

All the best,
  Daan Leijen.



Ucw already uses such a cgi for applying patches to a public repo:
http://uncommon-web.com/cgi-bin/ucw_public_apply.cgi

See my other mail for some possible security problems. Another idea
would be to use ssh with authorized keys and a forced command. You
could use a script that receives a patch on stdin and applies it to
the repo instead of the cgi script. Then you could use ssh instead of
the web server for authentication and it should be at least as secure
as the cgi solution.

Benedikt


_______________________________________________
darcs-users mailing list
[email protected]
http://www.abridgegame.org/mailman/listinfo/darcs-users


_______________________________________________
darcs-users mailing list
[email protected]
http://www.abridgegame.org/mailman/listinfo/darcs-users

Reply via email to