利用Nginx搭建Http访问的Git服务器，nginx搭建git服务器

文章由LinuxBoy分享于2019-04-03 09:04:28热评（309）

利用Nginx搭建Http访问的Git服务器，nginx搭建git服务器

本文参考了http://www.cnblogs.com/wangxiaoqiangs/p/6179610.html, 自己操作中收获一些错误心得.记下以备用.

一. 准备工作:

　　1. 下载nginx并安装

　　　　推荐到nginx官方网站下载并安装,有很详细的教程. 参考资料: http://nginx.org/en/linux_packages.html

　　　　(1). 编辑repo文件,这里以64位的CentOS 7为示例:

> vi /etc/yum.repos.d/nginx.repo

[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/x86_64/
gpgcheck=0
enabled=1

　　　　(2). 保存退出后,使用yum安装.可以选择把动态模块也安装上,具体参见上述站点

> yum install nginx -y

　　2. 下载git并安装

　　　　(1).不推荐使用yum安装的git版本,过低了.到github下载最新的git源码. 下载地址: https://github.com/git/git/releases

> yum -y remove git

> yum -y install perl cpio autoconf tk zlib-devel libcurl-devel openssl-devel expat-devel gettext-devel perl-ExtUtils-MakeMaker automake gcc

> cd /usr/local/src; wget https://github.com/git/git/archive/v2.11.1.tar.gz

> tar zxf v2.11.1.tar.gz && cd git-2.11.1

> autoconf && ./configure && make && make install

> git --version

　　　　(2). 这个时候,git安装好了,可以选择较高的稳定版本.我用的时候2.11.1

　　3. 下载spawn-fcgi, fcgi-devel, fcgiwrap并安装

　　　　(1). 安装spawn-fcgi.github地址: https://github.com/lighttpd/spawn-fcgi

　　　　　　这里需要注意的是,如果你没有安装前面的automake和gcc,请这里一定要把这些依赖安装好.

> cd /usr/local/src;

> git clone https://github.com/lighttpd/spawn-fcgi.git

> cd spawn-fcgi && ./autogen.sh && ./configure && make && make install

　　　　(2). 安装fcgi-devel.

　　　　　　安装前,需要先安装epel源,不然安装不了fcgi-devel

> yum -y install epel-release

> yum -y install fcgi-devel

　　　　(3). 安装fcgiwrap. GitHub地址: https://github.com/gnosek/fcgiwrap

> cd /usr/local/src

> git clone https://github.com/gnosek/fcgiwrap.git

> cd fcgiwrap && autoreconf -i && ./configure && make && make install

二. 配置

　　1. 添加Git的运行用户, Git仓库初始化

> useradd -r -s /sbin/nologin git

> mkdir -p /data/git && cd /data/git

> git init --bare repo.git && chown -R git.git /data/git

> cd repo.git && mv hooks/post-update.sample hooks/post-update

> git update-server-info

　　2. 编写fcgiwrap启动脚本

> vi /etc/init.d/fcgiwrap

　　　脚本内容:

#! /bin/bash
### BEGIN INIT INFO
# Provides:          fcgiwrap
# Required-Start:    $remote_fs
# Required-Stop:     $remote_fs
# Should-Start:
# Should-Stop:
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: FastCGI wrapper
# Description:       Simple server for running CGI applications over FastCGI
### END INIT INFO

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
SPAWN_FCGI="/usr/local/bin/spawn-fcgi"
DAEMON="/usr/local/sbin/fcgiwrap"
NAME="fcgiwrap"

PIDFILE="/var/run/$NAME.pid"

FCGI_SOCKET="/var/run/$NAME.socket"
FCGI_USER="git"
FCGI_GROUP="git"
FORK_NUM=15
SCRIPTNAME=/etc/init.d/$NAME

case "$1" in
    start)
        echo -n "Starting $NAME... "

        PID=`pidof $NAME`
        if [ ! -z "$PID" ]; then
            echo " $NAME already running"
            exit 1
        fi

        $SPAWN_FCGI -u $FCGI_USER -g $FCGI_GROUP -s $FCGI_SOCKET -P $PIDFILE -F $FORK_NUM -f $DAEMON

        if [ "$?" != 0 ]; then
            echo " failed"
            exit 1
        else
            echo " done"
        fi
    ;;

    stop)
        echo -n "Stoping $NAME... "

        PID=`pidof $NAME`
        if [ ! -z "$PID" ]; then
            kill `pidof $NAME`
            if [ "$?" != 0 ]; then
                echo " failed. re-quit"
                exit 1
            else
                rm -f $pid
                echo " done"
            fi
        else
            echo "$NAME is not running."
            exit 1
        fi
    ;;

    status)
        PID=`pidof $NAME`
        if [ ! -z "$PID" ]; then
            echo "$NAME (pid $PID) is running..."
        else
            echo "$NAME is stopped"
            exit 0
        fi
    ;;

    restart)
        $SCRIPTNAME stop
        sleep 1
        $SCRIPTNAME start
    ;;

    *)
        echo "Usage: $SCRIPTNAME {start|stop|restart|status}"
        exit 1
    ;;
esac

　　　注意其中"FCGI_USER"和"FCGI_GROUP"以及"FORK_NUM",分别为fastcgi运行的用户,组以及进程数(进程数按需调整).需要与之后配置的nginx的worker用户一样.

　　　记得修改一下读写权限以及设置脚本为开机启动.然后我们启动fastcgi

> chmod a+x /etc/init.d/fcgiwrap

> chkconfig --level 35 fcgiwrap on

> /etc/init.d/fcgiwrap start

　　3. nginx配置. yum安装的nginx已经默认配置了WebDAV模块,所以不用麻烦了.如果发现没有WebDAV模块的功能,可以参考nginx的官方文档中Dynamic Modules的说明: http://nginx.org/en/docs/ngx_core_module.html#load_module

　　　　(1). 创建授权文件夹以及git的nginx设置文件

> mkdir -p /usr/local/nginx/config

> vi /etc/nginx/conf.d/git.conf

　　　　　　内容如下:

server {
    listen      80;
    server_name gitServer;
    root /usr/local/share/gitweb;

    client_max_body_size 100m;

    auth_basic "Git User Authentication";
    auth_basic_user_file /usr/local/nginx/config/pass.db;

    location ~ ^.*\.git/objects/([0-9a-f]+/[0-9a-f]+|pack/pack-[0-9a-f]+.(pack|idx))$ {
        root /data/git;
    }    
    
    location ~ /.*\.git/(HEAD|info/refs|objects/info/.*|git-(upload|receive)-pack)$ {
        root          /data/git;
        fastcgi_pass  unix:/var/run/fcgiwrap.socket;
        fastcgi_connect_timeout 24h;
        fastcgi_read_timeout 24h;
        fastcgi_send_timeout 24h;
        fastcgi_param SCRIPT_FILENAME   /usr/local/libexec/git-core/git-http-backend;
        fastcgi_param PATH_INFO         $uri;
        fastcgi_param GIT_HTTP_EXPORT_ALL "";
        fastcgi_param GIT_PROJECT_ROOT  /data/git;
        fastcgi_param REMOTE_USER $remote_user;
        include fastcgi_params;
    }

    try_files $uri @gitweb;

    location @gitweb {
        fastcgi_pass  unix:/var/run/fcgiwrap.socket;
        fastcgi_param GITWEB_CONFIG    /etc/git/gitweb.conf;
        fastcgi_param SCRIPT_FILENAME  /usr/local/share/gitweb/gitweb.cgi;
        fastcgi_param PATH_INFO        $uri;
        include fastcgi_params;
    }
}

　　　　(2). 修改/etc/nginx/nginx.conf中的worker进程所有者.

# 将此处的nginx用户修改为git用户,以保证能调用到fastcgi(需要和fcgiwrap脚本中的FCGI_USER保持一致)
user  git;
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;
}

　　4. 安装http-tools并添加认证用户

> yum -y install httpd-tools

> cd /usr/local/nginx/config

> htpasswd -c pass.db guestUser

> git config --global color.ui true

> git config --global user.name 'git'

> git config --global user.email 'example@example.com'

　　5. 配置gitweb,首先要确定默认安装的gitweb(采用源码安装git才会有)是否存在

> find /usr/local/share -name gitweb.cgi

> cd /usr/local/share/gitweb && ll /usr/local/share/gitweb

> vi /etc/git/gitweb.conf

　　　　gitweb.conf的配置内容如下:

# path to git projects (<project>.git)
$projectroot = "/data/git";

# directory to use for temp files
$git_temp = "/tmp";

# target of the home link on top of all pages
$home_link = $my_uri || "/";

# html text to include at home page
$home_text = "indextext.html";

# file with project list; by default, simply scan the projectroot dir.
$projects_list = $projectroot;

# javascript code for gitweb
$javascript = "static/gitweb.js";

# stylesheet to use
$stylesheet = "static/gitweb.css";

# logo to use
$logo = "static/git-logo.png";

# the 'favicon'
$favicon = "static/git-favicon.png";

三. 启动nginx,fastcgi

> nginx -t

> systemctl start nginx

> /etc/init.d/fcgiwrap start

四. 问题收集:

　　1. 访问http://hostname/repo.git出现502错误,nginx错误日志中出现:connect() to unix:/var/run/fcgiwrap.socket failed (13: Permission denied) while connecting to upstream

　　　　解决方法: 检查selinux是否开启,如果开启,请关闭或者配置策略使其能被访问.

　　2. Can't locate CPAN.pm in @INC (@INC contains: /usr/local/lib/perl5 /usr/local/share/perl5 /usr/lib/perl5/vendorperl /usr/share/perl5/vendorperl /usr/lib/perl5 /usr/share/perl5 .) BEGIN failed--compilation aborted.

　　　　解决方法: yum -y install perl-CPAN

　　3. Can't locate CGI.pm in @INC (@INC contains: /usr/local/lib/perl5 /usr/local/share/perl5 /usr/lib/perl5/vendorperl /usr/share/perl5/vendorperl /usr/lib/perl5 /usr/share/perl5 .) BEGIN failed--compilation aborted.

　　　　解决方法: yum -y install perl-CGI

　　4. Can't locate Time/HiRes.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at /usr/local/share/gitweb/gitweb.cgi line 20.

　　　　解决方法: yum -y install perl-Time-HiRes

五. Gitweb-theme 样式

　　如果觉得 gitweb 默认样式不好看，可以拿该样式替换

> cd /usr/local/src

> git clone https://github.com/kogakure/gitweb-theme.git

> cd gitweb-theme
# -t 指定 gitweb 根目录，一路 y 即可
> ./setup -vi -t /usr/local/share/gitweb --install

推荐文章：

利用Nginx搭建Http访问的Git服务器，nginx搭建git服务器