greenhouse

greenhouse / hedge / README39 lines · 930B · raw
1hedge - git access control for ssh
2==================================
3hedge is run as the forced command of an ssh key. It allows git fetch
4and push to the repositories an access list grants to that key, and
5nothing else.
6
7
8Requirements
9------------
10In order to run hedge you need git-shell, which comes with git.
11
12
13Installation
14------------
15Edit config.mk to match your local setup (hedge is installed into
16the /usr/local namespace by default).
17
18Afterwards enter the following command to build and install hedge (if
19necessary as root):
20
21    make clean install
22
23
24Running hedge
25-------------
26List the grants in the acl file:
27
28    greenhouse write alice
29    greenhouse read bob
30
31and give each ssh key of the git user its identity:
32
33    command="/usr/local/bin/hedge alice",restrict ssh-ed25519 AAAA...
34
35
36Configuration
37-------------
38The configuration of hedge is done by creating a custom config.h
39and (re)compiling the source code.