详解在CentOS下搭建自己的Git服务器
<p>首先需要装好CentOS系统，作为测试，你可以选择装在虚拟机上，这样比较方便。这步默认你会，就不讲了。</p>
<p>
有了CentOS，那么如何搭建Git服务器呢？</p>
<p>
1、首先需要安装Git，可以使用yum源在线安装：</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_103915">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain"></code><code class="bash comments"># yum install -y git</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
2、创建一个git用户，用来运行git服务</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_348687">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash comments"># adduser git</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
3、初始化git仓库：这里我们选择/data/git/learngit.git来作为我们的git仓库</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_46376">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain"></code><code class="bash comments"># git init --bare learngit.git </code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">Initialized empty Git repository </code><code class="bash keyword">in</code> <code class="bash plain">/data/git/learngit</code><code class="bash plain">.git/ </code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
执行以上命令，会创建一个裸仓库，裸仓库没有工作区，因为服务器上的Git仓库纯粹是为了共享，所以不让用户直接登录到服务器上去改工作区，并且服务器上的Git仓库通常都以.git结尾。然后，把owner改为git：</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_788684">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain"></code><code class="bash comments"># chown git:git learngit.git</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
4、在这里，Git服务器就已经搭得差不多了。下面我们在客户端clone一下远程仓库</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_668741">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
<div class="line number6 index5 alt1">
6</div>
<div class="line number7 index6 alt2">
7</div>
<div class="line number8 index7 alt1">
8</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">Zhu@XXX </code><code class="bash plain">/E/testgit/8</code><code class="bash plain">.34</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">$ git clone git@192.168.8.34:</code><code class="bash plain">/data/git/learngit</code><code class="bash plain">.git</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash plain">Cloning into </code><code class="bash string">'learngit'</code><code class="bash plain">...</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash plain">The authenticity of host </code><code class="bash string">'192.168.8.34 (192.168.8.34)'</code> <code class="bash plain">can't be established.</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain">RSA key fingerprint is 2b:55:45:e7:4c:29:cc:05:33:78:03:bd:a8:</code><code class="bash functions">cd</code><code class="bash plain">:08:9d.</code>
</div>
<div class="line number6 index5 alt1">
<code class="bash plain">Are you sure you want to </code><code class="bash keyword">continue</code> <code class="bash plain">connecting (</code><code class="bash functions">yes</code><code class="bash plain">/no</code><code class="bash plain">)? </code><code class="bash functions">yes</code>
</div>
<div class="line number7 index6 alt2">
<code class="bash plain">Warning: Permanently added </code><code class="bash string">'192.168.8.34'</code> <code class="bash plain">(RSA) to the list of known hosts.</code>
</div>
<div class="line number8 index7 alt1">
<code class="bash plain">git@192.168.8.34's password:</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
这里两点需要注意：第一，当你第一次使用Git的clone或者push命令连接GitHub时，会得到一个警告：</p>
<p>
The authenticity of host 'github.com (xx.xx.xx.xx)' can't be established.<br>
RSA key fingerprint is xx.xx.xx.xx.xx.<br>
Are you sure you want to continue connecting (yes/no)?</p>
<p>
这是因为Git使用SSH连接，而SSH连接在第一次验证GitHub服务器的Key时，需要你确认GitHub的Key的指纹信息是否真的来自GitHub的服务器，输入yes回车即可。</p>
<p>
Git会输出一个警告，告诉你已经把GitHub的Key添加到本机的一个信任列表里了：</p>
<p>
<span>Warning: Permanently added 'github.com' (RSA) to the list of known hosts.</span></p>
<p>
这个警告只会出现一次，后面的操作就不会有任何警告了。</p>
<p>
如果你实在担心有人冒充GitHub服务器，输入yes前可以对照GitHub的RSA Key的指纹信息是否与SSH连接给出的一致。</p>
<p>
第二，这里提示你输入密码才能clone，当然如果你知道密码，可以键入密码来进行clone，但是更为常见的方式，是利用SSH的公钥来完成验证。</p>
<p>
5、创建SSH Key</p>
<p>
首先在用户主目录下，看看有没有.ssh目录，如果有，再看看这个目录下有没有id_rsa和id_rsa.pub这两个文件，如果已经有了，可直接跳到下一步。如果没有，打开Shell（Windows下打开Git Bash），创建SSH Key：</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_818910">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">$ </code><code class="bash functions">ssh</code><code class="bash plain">-keygen -t rsa -C </code><code class="bash string">"youremail@example.com"</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
你需要把邮件地址换成你自己的邮件地址，然后一路回车，使用默认值即可，由于这个Key也不是用于军事目的，所以也无需设置密码。</p>
<p>
如果一切顺利的话，可以在用户主目录里找到.ssh目录，里面有id_rsa和id_rsa.pub两个文件，这两个就是SSH Key的秘钥对，id_rsa是私钥，不能泄露出去，id_rsa.pub是公钥，可以放心地告诉任何人。</p>
<p>
6、Git服务器打开RSA认证</p>
<p>
然后就可以去Git服务器上添加你的公钥用来验证你的信息了。在Git服务器上首先需要将/etc/ssh/sshd_config中将RSA认证打开，即：</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_616177">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">RSAAuthentication </code><code class="bash functions">yes</code> </div>
<div class="line number2 index1 alt1">
<code class="bash plain">PubkeyAuthentication </code><code class="bash functions">yes</code> </div>
<div class="line number3 index2 alt2">
<code class="bash plain">AuthorizedKeysFile .</code><code class="bash functions">ssh</code><code class="bash plain">/authorized_keys</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
这里我们可以看到公钥存放在.ssh/authorized_keys文件中。所以我们在/home/git下创建.ssh目录，然后创建authorized_keys文件，并将刚生成的公钥导入进去。</p>
<p>
然后再次clone的时候，或者是之后push的时候，就不需要再输入密码了：</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_250222">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
<div class="line number2 index1 alt1">
2</div>
<div class="line number3 index2 alt2">
3</div>
<div class="line number4 index3 alt1">
4</div>
<div class="line number5 index4 alt2">
5</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">Zhu@XXX</code><code class="bash plain">/E/testgit/8</code><code class="bash plain">.34</code>
</div>
<div class="line number2 index1 alt1">
<code class="bash plain">$ git clone git@192.168.8.34:</code><code class="bash plain">/data/git/learngit</code><code class="bash plain">.git</code>
</div>
<div class="line number3 index2 alt2">
<code class="bash plain">Cloning into </code><code class="bash string">'learngit'</code><code class="bash plain">...</code>
</div>
<div class="line number4 index3 alt1">
<code class="bash plain">warning: You appear to have cloned an empty repository.</code>
</div>
<div class="line number5 index4 alt2">
<code class="bash plain">Checking connectivity... </code><code class="bash keyword">done</code><code class="bash plain">.</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
7、禁用git用户的shell登陆</p>
<p>
出于安全考虑，第二步创建的git用户不允许登录shell，这可以通过编辑/etc/passwd文件完成。找到类似下面的一行：</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_621498">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">git:x:1001:1001:,,,:</code><code class="bash plain">/home/git</code><code class="bash plain">:</code><code class="bash plain">/bin/bash</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
最后一个冒号后改为：</p>
<div class="jb51code">
<div>
<div class="syntaxhighlighterbash" id="highlighter_858949">
<div class="toolbar">
<span>?</span>
</div>
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr>
<td class="gutter">
<div class="line number1 index0 alt2">
1</div>
</td>
<td class="code">
<div class="container">
<div class="line number1 index0 alt2">
<code class="bash plain">git:x:1001:1001:,,,:</code><code class="bash plain">/home/git</code><code class="bash plain">:</code><code class="bash plain">/usr/bin/git-shell</code>
</div>
</div>
</td>
</tr></tbody></table>
</div>
</div>
<div class="codetool" id="codetool">
<div class="code_n">
<textarea></textarea>
</div>
</div>
</div>
<p>
这样，git用户可以正常通过ssh使用git，但无法登录shell，因为我们为git用户指定的git-shell每次一登录就自动退出。</p>
<p>
以上就是本文的全部内容，希望对大家的学习有所帮助，也希望大家多多支持服务器之家。</p>
<p>
原文链接：http://blog.csdn.net/wave_1102/article/details/47779401</p>
頁:
[1]