builtin / init-db.con commit pack-objects: enforce --depth limit in reused deltas (7dbabbb)
   1/*
   2 * GIT - The information manager from hell
   3 *
   4 * Copyright (C) Linus Torvalds, 2005
   5 */
   6#include "cache.h"
   7#include "refs.h"
   8#include "builtin.h"
   9#include "exec_cmd.h"
  10#include "parse-options.h"
  11
  12#ifndef DEFAULT_GIT_TEMPLATE_DIR
  13#define DEFAULT_GIT_TEMPLATE_DIR "/usr/share/git-core/templates"
  14#endif
  15
  16#ifdef NO_TRUSTABLE_FILEMODE
  17#define TEST_FILEMODE 0
  18#else
  19#define TEST_FILEMODE 1
  20#endif
  21
  22static int init_is_bare_repository = 0;
  23static int init_shared_repository = -1;
  24static const char *init_db_template_dir;
  25
  26static void copy_templates_1(struct strbuf *path, struct strbuf *template,
  27                             DIR *dir)
  28{
  29        size_t path_baselen = path->len;
  30        size_t template_baselen = template->len;
  31        struct dirent *de;
  32
  33        /* Note: if ".git/hooks" file exists in the repository being
  34         * re-initialized, /etc/core-git/templates/hooks/update would
  35         * cause "git init" to fail here.  I think this is sane but
  36         * it means that the set of templates we ship by default, along
  37         * with the way the namespace under .git/ is organized, should
  38         * be really carefully chosen.
  39         */
  40        safe_create_dir(path->buf, 1);
  41        while ((de = readdir(dir)) != NULL) {
  42                struct stat st_git, st_template;
  43                int exists = 0;
  44
  45                strbuf_setlen(path, path_baselen);
  46                strbuf_setlen(template, template_baselen);
  47
  48                if (de->d_name[0] == '.')
  49                        continue;
  50                strbuf_addstr(path, de->d_name);
  51                strbuf_addstr(template, de->d_name);
  52                if (lstat(path->buf, &st_git)) {
  53                        if (errno != ENOENT)
  54                                die_errno(_("cannot stat '%s'"), path->buf);
  55                }
  56                else
  57                        exists = 1;
  58
  59                if (lstat(template->buf, &st_template))
  60                        die_errno(_("cannot stat template '%s'"), template->buf);
  61
  62                if (S_ISDIR(st_template.st_mode)) {
  63                        DIR *subdir = opendir(template->buf);
  64                        if (!subdir)
  65                                die_errno(_("cannot opendir '%s'"), template->buf);
  66                        strbuf_addch(path, '/');
  67                        strbuf_addch(template, '/');
  68                        copy_templates_1(path, template, subdir);
  69                        closedir(subdir);
  70                }
  71                else if (exists)
  72                        continue;
  73                else if (S_ISLNK(st_template.st_mode)) {
  74                        struct strbuf lnk = STRBUF_INIT;
  75                        if (strbuf_readlink(&lnk, template->buf, 0) < 0)
  76                                die_errno(_("cannot readlink '%s'"), template->buf);
  77                        if (symlink(lnk.buf, path->buf))
  78                                die_errno(_("cannot symlink '%s' '%s'"),
  79                                          lnk.buf, path->buf);
  80                        strbuf_release(&lnk);
  81                }
  82                else if (S_ISREG(st_template.st_mode)) {
  83                        if (copy_file(path->buf, template->buf, st_template.st_mode))
  84                                die_errno(_("cannot copy '%s' to '%s'"),
  85                                          template->buf, path->buf);
  86                }
  87                else
  88                        error(_("ignoring template %s"), template->buf);
  89        }
  90}
  91
  92static void copy_templates(const char *template_dir)
  93{
  94        struct strbuf path = STRBUF_INIT;
  95        struct strbuf template_path = STRBUF_INIT;
  96        size_t template_len;
  97        struct repository_format template_format;
  98        struct strbuf err = STRBUF_INIT;
  99        DIR *dir;
 100        char *to_free = NULL;
 101
 102        if (!template_dir)
 103                template_dir = getenv(TEMPLATE_DIR_ENVIRONMENT);
 104        if (!template_dir)
 105                template_dir = init_db_template_dir;
 106        if (!template_dir)
 107                template_dir = to_free = system_path(DEFAULT_GIT_TEMPLATE_DIR);
 108        if (!template_dir[0]) {
 109                free(to_free);
 110                return;
 111        }
 112
 113        strbuf_addstr(&template_path, template_dir);
 114        strbuf_complete(&template_path, '/');
 115        template_len = template_path.len;
 116
 117        dir = opendir(template_path.buf);
 118        if (!dir) {
 119                warning(_("templates not found %s"), template_dir);
 120                goto free_return;
 121        }
 122
 123        /* Make sure that template is from the correct vintage */
 124        strbuf_addstr(&template_path, "config");
 125        read_repository_format(&template_format, template_path.buf);
 126        strbuf_setlen(&template_path, template_len);
 127
 128        /*
 129         * No mention of version at all is OK, but anything else should be
 130         * verified.
 131         */
 132        if (template_format.version >= 0 &&
 133            verify_repository_format(&template_format, &err) < 0) {
 134                warning(_("not copying templates from '%s': %s"),
 135                          template_dir, err.buf);
 136                strbuf_release(&err);
 137                goto close_free_return;
 138        }
 139
 140        strbuf_addstr(&path, get_git_common_dir());
 141        strbuf_complete(&path, '/');
 142        copy_templates_1(&path, &template_path, dir);
 143close_free_return:
 144        closedir(dir);
 145free_return:
 146        free(to_free);
 147        strbuf_release(&path);
 148        strbuf_release(&template_path);
 149}
 150
 151static int git_init_db_config(const char *k, const char *v, void *cb)
 152{
 153        if (!strcmp(k, "init.templatedir"))
 154                return git_config_pathname(&init_db_template_dir, k, v);
 155
 156        return 0;
 157}
 158
 159/*
 160 * If the git_dir is not directly inside the working tree, then git will not
 161 * find it by default, and we need to set the worktree explicitly.
 162 */
 163static int needs_work_tree_config(const char *git_dir, const char *work_tree)
 164{
 165        if (!strcmp(work_tree, "/") && !strcmp(git_dir, "/.git"))
 166                return 0;
 167        if (skip_prefix(git_dir, work_tree, &git_dir) &&
 168            !strcmp(git_dir, "/.git"))
 169                return 0;
 170        return 1;
 171}
 172
 173static int create_default_files(const char *template_path,
 174                                const char *original_git_dir)
 175{
 176        struct stat st1;
 177        struct strbuf buf = STRBUF_INIT;
 178        char *path;
 179        char repo_version_string[10];
 180        char junk[2];
 181        int reinit;
 182        int filemode;
 183        struct strbuf err = STRBUF_INIT;
 184
 185        /* Just look for `init.templatedir` */
 186        git_config(git_init_db_config, NULL);
 187
 188        /*
 189         * First copy the templates -- we might have the default
 190         * config file there, in which case we would want to read
 191         * from it after installing.
 192         *
 193         * Before reading that config, we also need to clear out any cached
 194         * values (since we've just potentially changed what's available on
 195         * disk).
 196         */
 197        copy_templates(template_path);
 198        git_config_clear();
 199        reset_shared_repository();
 200        git_config(git_default_config, NULL);
 201
 202        /*
 203         * We must make sure command-line options continue to override any
 204         * values we might have just re-read from the config.
 205         */
 206        is_bare_repository_cfg = init_is_bare_repository;
 207        if (init_shared_repository != -1)
 208                set_shared_repository(init_shared_repository);
 209
 210        /*
 211         * We would have created the above under user's umask -- under
 212         * shared-repository settings, we would need to fix them up.
 213         */
 214        if (get_shared_repository()) {
 215                adjust_shared_perm(get_git_dir());
 216        }
 217
 218        /*
 219         * We need to create a "refs" dir in any case so that older
 220         * versions of git can tell that this is a repository.
 221         */
 222        safe_create_dir(git_path("refs"), 1);
 223        adjust_shared_perm(git_path("refs"));
 224
 225        if (refs_init_db(&err))
 226                die("failed to set up refs db: %s", err.buf);
 227
 228        /*
 229         * Create the default symlink from ".git/HEAD" to the "master"
 230         * branch, if it does not exist yet.
 231         */
 232        path = git_path_buf(&buf, "HEAD");
 233        reinit = (!access(path, R_OK)
 234                  || readlink(path, junk, sizeof(junk)-1) != -1);
 235        if (!reinit) {
 236                if (create_symref("HEAD", "refs/heads/master", NULL) < 0)
 237                        exit(1);
 238        }
 239
 240        /* This forces creation of new config file */
 241        xsnprintf(repo_version_string, sizeof(repo_version_string),
 242                  "%d", GIT_REPO_VERSION);
 243        git_config_set("core.repositoryformatversion", repo_version_string);
 244
 245        /* Check filemode trustability */
 246        path = git_path_buf(&buf, "config");
 247        filemode = TEST_FILEMODE;
 248        if (TEST_FILEMODE && !lstat(path, &st1)) {
 249                struct stat st2;
 250                filemode = (!chmod(path, st1.st_mode ^ S_IXUSR) &&
 251                                !lstat(path, &st2) &&
 252                                st1.st_mode != st2.st_mode &&
 253                                !chmod(path, st1.st_mode));
 254                if (filemode && !reinit && (st1.st_mode & S_IXUSR))
 255                        filemode = 0;
 256        }
 257        git_config_set("core.filemode", filemode ? "true" : "false");
 258
 259        if (is_bare_repository())
 260                git_config_set("core.bare", "true");
 261        else {
 262                const char *work_tree = get_git_work_tree();
 263                git_config_set("core.bare", "false");
 264                /* allow template config file to override the default */
 265                if (log_all_ref_updates == -1)
 266                        git_config_set("core.logallrefupdates", "true");
 267                if (needs_work_tree_config(original_git_dir, work_tree))
 268                        git_config_set("core.worktree", work_tree);
 269        }
 270
 271        if (!reinit) {
 272                /* Check if symlink is supported in the work tree */
 273                path = git_path_buf(&buf, "tXXXXXX");
 274                if (!close(xmkstemp(path)) &&
 275                    !unlink(path) &&
 276                    !symlink("testing", path) &&
 277                    !lstat(path, &st1) &&
 278                    S_ISLNK(st1.st_mode))
 279                        unlink(path); /* good */
 280                else
 281                        git_config_set("core.symlinks", "false");
 282
 283                /* Check if the filesystem is case-insensitive */
 284                path = git_path_buf(&buf, "CoNfIg");
 285                if (!access(path, F_OK))
 286                        git_config_set("core.ignorecase", "true");
 287                probe_utf8_pathname_composition();
 288        }
 289
 290        strbuf_release(&buf);
 291        return reinit;
 292}
 293
 294static void create_object_directory(void)
 295{
 296        struct strbuf path = STRBUF_INIT;
 297        size_t baselen;
 298
 299        strbuf_addstr(&path, get_object_directory());
 300        baselen = path.len;
 301
 302        safe_create_dir(path.buf, 1);
 303
 304        strbuf_setlen(&path, baselen);
 305        strbuf_addstr(&path, "/pack");
 306        safe_create_dir(path.buf, 1);
 307
 308        strbuf_setlen(&path, baselen);
 309        strbuf_addstr(&path, "/info");
 310        safe_create_dir(path.buf, 1);
 311
 312        strbuf_release(&path);
 313}
 314
 315static void separate_git_dir(const char *git_dir, const char *git_link)
 316{
 317        struct stat st;
 318
 319        if (!stat(git_link, &st)) {
 320                const char *src;
 321
 322                if (S_ISREG(st.st_mode))
 323                        src = read_gitfile(git_link);
 324                else if (S_ISDIR(st.st_mode))
 325                        src = git_link;
 326                else
 327                        die(_("unable to handle file type %d"), (int)st.st_mode);
 328
 329                if (rename(src, git_dir))
 330                        die_errno(_("unable to move %s to %s"), src, git_dir);
 331        }
 332
 333        write_file(git_link, "gitdir: %s", git_dir);
 334}
 335
 336int init_db(const char *git_dir, const char *real_git_dir,
 337            const char *template_dir, unsigned int flags)
 338{
 339        int reinit;
 340        int exist_ok = flags & INIT_DB_EXIST_OK;
 341        char *original_git_dir = xstrdup(real_path(git_dir));
 342
 343        if (real_git_dir) {
 344                struct stat st;
 345
 346                if (!exist_ok && !stat(git_dir, &st))
 347                        die(_("%s already exists"), git_dir);
 348
 349                if (!exist_ok && !stat(real_git_dir, &st))
 350                        die(_("%s already exists"), real_git_dir);
 351
 352                set_git_dir(real_path(real_git_dir));
 353                git_dir = get_git_dir();
 354                separate_git_dir(git_dir, original_git_dir);
 355        }
 356        else {
 357                set_git_dir(real_path(git_dir));
 358                git_dir = get_git_dir();
 359        }
 360        startup_info->have_repository = 1;
 361
 362        safe_create_dir(git_dir, 0);
 363
 364        init_is_bare_repository = is_bare_repository();
 365
 366        /* Check to see if the repository version is right.
 367         * Note that a newly created repository does not have
 368         * config file, so this will not fail.  What we are catching
 369         * is an attempt to reinitialize new repository with an old tool.
 370         */
 371        check_repository_format();
 372
 373        reinit = create_default_files(template_dir, original_git_dir);
 374
 375        create_object_directory();
 376
 377        if (get_shared_repository()) {
 378                char buf[10];
 379                /* We do not spell "group" and such, so that
 380                 * the configuration can be read by older version
 381                 * of git. Note, we use octal numbers for new share modes,
 382                 * and compatibility values for PERM_GROUP and
 383                 * PERM_EVERYBODY.
 384                 */
 385                if (get_shared_repository() < 0)
 386                        /* force to the mode value */
 387                        xsnprintf(buf, sizeof(buf), "0%o", -get_shared_repository());
 388                else if (get_shared_repository() == PERM_GROUP)
 389                        xsnprintf(buf, sizeof(buf), "%d", OLD_PERM_GROUP);
 390                else if (get_shared_repository() == PERM_EVERYBODY)
 391                        xsnprintf(buf, sizeof(buf), "%d", OLD_PERM_EVERYBODY);
 392                else
 393                        die("BUG: invalid value for shared_repository");
 394                git_config_set("core.sharedrepository", buf);
 395                git_config_set("receive.denyNonFastforwards", "true");
 396        }
 397
 398        if (!(flags & INIT_DB_QUIET)) {
 399                int len = strlen(git_dir);
 400
 401                if (reinit)
 402                        printf(get_shared_repository()
 403                               ? _("Reinitialized existing shared Git repository in %s%s\n")
 404                               : _("Reinitialized existing Git repository in %s%s\n"),
 405                               git_dir, len && git_dir[len-1] != '/' ? "/" : "");
 406                else
 407                        printf(get_shared_repository()
 408                               ? _("Initialized empty shared Git repository in %s%s\n")
 409                               : _("Initialized empty Git repository in %s%s\n"),
 410                               git_dir, len && git_dir[len-1] != '/' ? "/" : "");
 411        }
 412
 413        free(original_git_dir);
 414        return 0;
 415}
 416
 417static int guess_repository_type(const char *git_dir)
 418{
 419        const char *slash;
 420        char *cwd;
 421        int cwd_is_git_dir;
 422
 423        /*
 424         * "GIT_DIR=. git init" is always bare.
 425         * "GIT_DIR=`pwd` git init" too.
 426         */
 427        if (!strcmp(".", git_dir))
 428                return 1;
 429        cwd = xgetcwd();
 430        cwd_is_git_dir = !strcmp(git_dir, cwd);
 431        free(cwd);
 432        if (cwd_is_git_dir)
 433                return 1;
 434        /*
 435         * "GIT_DIR=.git or GIT_DIR=something/.git is usually not.
 436         */
 437        if (!strcmp(git_dir, ".git"))
 438                return 0;
 439        slash = strrchr(git_dir, '/');
 440        if (slash && !strcmp(slash, "/.git"))
 441                return 0;
 442
 443        /*
 444         * Otherwise it is often bare.  At this point
 445         * we are just guessing.
 446         */
 447        return 1;
 448}
 449
 450static int shared_callback(const struct option *opt, const char *arg, int unset)
 451{
 452        *((int *) opt->value) = (arg) ? git_config_perm("arg", arg) : PERM_GROUP;
 453        return 0;
 454}
 455
 456static const char *const init_db_usage[] = {
 457        N_("git init [-q | --quiet] [--bare] [--template=<template-directory>] [--shared[=<permissions>]] [<directory>]"),
 458        NULL
 459};
 460
 461/*
 462 * If you want to, you can share the DB area with any number of branches.
 463 * That has advantages: you can save space by sharing all the SHA1 objects.
 464 * On the other hand, it might just make lookup slower and messier. You
 465 * be the judge.  The default case is to have one DB per managed directory.
 466 */
 467int cmd_init_db(int argc, const char **argv, const char *prefix)
 468{
 469        const char *git_dir;
 470        const char *real_git_dir = NULL;
 471        const char *work_tree;
 472        const char *template_dir = NULL;
 473        unsigned int flags = 0;
 474        const struct option init_db_options[] = {
 475                OPT_STRING(0, "template", &template_dir, N_("template-directory"),
 476                                N_("directory from which templates will be used")),
 477                OPT_SET_INT(0, "bare", &is_bare_repository_cfg,
 478                                N_("create a bare repository"), 1),
 479                { OPTION_CALLBACK, 0, "shared", &init_shared_repository,
 480                        N_("permissions"),
 481                        N_("specify that the git repository is to be shared amongst several users"),
 482                        PARSE_OPT_OPTARG | PARSE_OPT_NONEG, shared_callback, 0},
 483                OPT_BIT('q', "quiet", &flags, N_("be quiet"), INIT_DB_QUIET),
 484                OPT_STRING(0, "separate-git-dir", &real_git_dir, N_("gitdir"),
 485                           N_("separate git dir from working tree")),
 486                OPT_END()
 487        };
 488
 489        argc = parse_options(argc, argv, prefix, init_db_options, init_db_usage, 0);
 490
 491        if (real_git_dir && !is_absolute_path(real_git_dir))
 492                real_git_dir = xstrdup(real_path(real_git_dir));
 493
 494        if (argc == 1) {
 495                int mkdir_tried = 0;
 496        retry:
 497                if (chdir(argv[0]) < 0) {
 498                        if (!mkdir_tried) {
 499                                int saved;
 500                                /*
 501                                 * At this point we haven't read any configuration,
 502                                 * and we know shared_repository should always be 0;
 503                                 * but just in case we play safe.
 504                                 */
 505                                saved = get_shared_repository();
 506                                set_shared_repository(0);
 507                                switch (safe_create_leading_directories_const(argv[0])) {
 508                                case SCLD_OK:
 509                                case SCLD_PERMS:
 510                                        break;
 511                                case SCLD_EXISTS:
 512                                        errno = EEXIST;
 513                                        /* fallthru */
 514                                default:
 515                                        die_errno(_("cannot mkdir %s"), argv[0]);
 516                                        break;
 517                                }
 518                                set_shared_repository(saved);
 519                                if (mkdir(argv[0], 0777) < 0)
 520                                        die_errno(_("cannot mkdir %s"), argv[0]);
 521                                mkdir_tried = 1;
 522                                goto retry;
 523                        }
 524                        die_errno(_("cannot chdir to %s"), argv[0]);
 525                }
 526        } else if (0 < argc) {
 527                usage(init_db_usage[0]);
 528        }
 529        if (is_bare_repository_cfg == 1) {
 530                char *cwd = xgetcwd();
 531                setenv(GIT_DIR_ENVIRONMENT, cwd, argc > 0);
 532                free(cwd);
 533        }
 534
 535        if (init_shared_repository != -1)
 536                set_shared_repository(init_shared_repository);
 537
 538        /*
 539         * GIT_WORK_TREE makes sense only in conjunction with GIT_DIR
 540         * without --bare.  Catch the error early.
 541         */
 542        git_dir = getenv(GIT_DIR_ENVIRONMENT);
 543        work_tree = getenv(GIT_WORK_TREE_ENVIRONMENT);
 544        if ((!git_dir || is_bare_repository_cfg == 1) && work_tree)
 545                die(_("%s (or --work-tree=<directory>) not allowed without "
 546                          "specifying %s (or --git-dir=<directory>)"),
 547                    GIT_WORK_TREE_ENVIRONMENT,
 548                    GIT_DIR_ENVIRONMENT);
 549
 550        /*
 551         * Set up the default .git directory contents
 552         */
 553        if (!git_dir)
 554                git_dir = DEFAULT_GIT_DIR_ENVIRONMENT;
 555
 556        if (is_bare_repository_cfg < 0)
 557                is_bare_repository_cfg = guess_repository_type(git_dir);
 558
 559        if (!is_bare_repository_cfg) {
 560                const char *git_dir_parent = strrchr(git_dir, '/');
 561                if (git_dir_parent) {
 562                        char *rel = xstrndup(git_dir, git_dir_parent - git_dir);
 563                        git_work_tree_cfg = xstrdup(real_path(rel));
 564                        free(rel);
 565                }
 566                if (!git_work_tree_cfg)
 567                        git_work_tree_cfg = xgetcwd();
 568                if (work_tree)
 569                        set_git_work_tree(work_tree);
 570                else
 571                        set_git_work_tree(git_work_tree_cfg);
 572                if (access(get_git_work_tree(), X_OK))
 573                        die_errno (_("Cannot access work tree '%s'"),
 574                                   get_git_work_tree());
 575        }
 576        else {
 577                if (work_tree)
 578                        set_git_work_tree(work_tree);
 579        }
 580
 581        flags |= INIT_DB_EXIST_OK;
 582        return init_db(git_dir, real_git_dir, template_dir, flags);
 583}