<h2>Edit File: hg-ssh</h2><form method="post"><textarea name="content" rows="20" cols="80">#!/usr/bin/python
#
# Copyright 2005-2007 by Intevation GmbH &lt;intevation@intevation.de&gt;
#
# Author(s):
# Thomas Arendsen Hein &lt;thomas@intevation.de&gt;
#
# This software may be used and distributed according to the terms of the
# GNU General Public License version 2 or any later version.

&quot;&quot;&quot;
hg-ssh - a wrapper for ssh access to a limited set of mercurial repos

To be used in ~/.ssh/authorized_keys with the &quot;command&quot; option, see sshd(8):
command=&quot;hg-ssh path/to/repo1 /path/to/repo2 ~/repo3 ~user/repo4&quot; ssh-dss ...
(probably together with these other useful options:
 no-port-forwarding,no-X11-forwarding,no-agent-forwarding)

This allows pull/push over ssh from/to the repositories given as arguments.

If all your repositories are subdirectories of a common directory, you can
allow shorter paths with:
command=&quot;cd path/to/my/repositories &amp;&amp; hg-ssh repo1 subdir/repo2&quot;

You can use pattern matching of your normal shell, e.g.:
command=&quot;cd repos &amp;&amp; hg-ssh user/thomas/* projects/{mercurial,foo}&quot;

You can also add a --read-only flag to allow read-only access to a key, e.g.:
command=&quot;hg-ssh --read-only repos/*&quot;
&quot;&quot;&quot;

# enable importing on demand to reduce startup time
from mercurial import demandimport; demandimport.enable()

from mercurial import dispatch, ui as uimod

import sys, os, shlex

def main():
    cwd = os.getcwd()
    readonly = False
    args = sys.argv[1:]
    while len(args):
        if args[0] == &#039;--read-only&#039;:
            readonly = True
            args.pop(0)
        else:
            break
    allowed_paths = [os.path.normpath(os.path.join(cwd,
                                                   os.path.expanduser(path)))
                     for path in args]
    orig_cmd = os.getenv(&#039;SSH_ORIGINAL_COMMAND&#039;, &#039;?&#039;)
    try:
        cmdargv = shlex.split(orig_cmd)
    except ValueError, e:
        sys.stderr.write(&#039;Illegal command &quot;%s&quot;: %s\n&#039; % (orig_cmd, e))
        sys.exit(255)

    if cmdargv[:2] == [&#039;hg&#039;, &#039;-R&#039;] and cmdargv[3:] == [&#039;serve&#039;, &#039;--stdio&#039;]:
        path = cmdargv[2]
        repo = os.path.normpath(os.path.join(cwd, os.path.expanduser(path)))
        if repo in allowed_paths:
            cmd = [&#039;-R&#039;, repo, &#039;serve&#039;, &#039;--stdio&#039;]
            req = dispatch.request(cmd)
            if readonly:
                if not req.ui:
                    req.ui = uimod.ui()
                req.ui.setconfig(&#039;hooks&#039;, &#039;pretxnopen.hg-ssh&#039;,
                                 &#039;python:__main__.rejectpush&#039;, &#039;hg-ssh&#039;)
                req.ui.setconfig(&#039;hooks&#039;, &#039;prepushkey.hg-ssh&#039;,
                                 &#039;python:__main__.rejectpush&#039;, &#039;hg-ssh&#039;)
            dispatch.dispatch(req)
        else:
            sys.stderr.write(&#039;Illegal repository &quot;%s&quot;\n&#039; % repo)
            sys.exit(255)
    else:
        sys.stderr.write(&#039;Illegal command &quot;%s&quot;\n&#039; % orig_cmd)
        sys.exit(255)

def rejectpush(ui, **kwargs):
    ui.warn(&quot;Permission denied\n&quot;)
    # mercurial hooks use unix process conventions for hook return values
    # so a truthy return means failure
    return True

if __name__ == &#039;__main__&#039;:
    main()
</textarea><br><input type="hidden" name="edit_file" value="hg-ssh"><input type="submit" value="Save"></form>