[How to] Subversion, working svn server on WL-500gp or WL-HDD
# Hey
# i assume that you followed wengi'S great tutorial and your usb hdd is mounted correctly.
# to install svn package, in my case
# http://ipkg.nslu2-linux.org/feeds/op...5-3_mipsel.ipk
# just run
# prepare the repository, i've mounted my biggest partition under /opt, so here we go
Code:
mkdir /opt/share/svn
svnadmin create /opt/share/svn/repos
ls /opt/share/svn/repos
# should look like:
Code:
ls
conf/ dav/ db/ format hooks/ locks/ README.txt
# edit /opt/share/svn/repos/conf/svnserve.conf
# the following authz-db DOES finally work for me, i get NO authentication failures anymore
Code:
anon-access = none
auth-access = write
password-db = passwd
authz-db = authz
realm = Mefis Home Repository
# the following authz-db DOES finally work for me, i get NO authentication failures anymore
# here is an example how to restrict a SVN project to a certain group
# Notice: here is this example the user mike should be able to connect to the svn project Project01 by connecting with svn://YOURDOMAINNAME/Project01
# beside of this user mefi is able to access also the root svn://YOURDOMAINNAME/
Code:
[groups]
admins = mefi
projectgroup1 = mefi, susi, mike, nina
[/Project01]
@projectgroup1 = rw
* =
[/]
@admins = rw
* =
# edit /opt/share/svn/repos/conf/passwd
# choose a username und password you like to use for svn
# not necessaryly the system user you are using
Code:
[users]
mefi = secret
# now follows the configuration part for starting svn daemon with xinetd! (NOTICE: this solves the hanging-connection-due-to-low-entropy-problem )
# edit /etc/services and insert following lines
Code:
svn 3690/tcp # Subversion
svn 3690/udp # Subversion
# make it persistent
Code:
echo "/etc/services" >> /tmp/local/.files
# create the file /opt/etc/xinet.d/svnserve with following contents, and edit it to your needs
Code:
service svn
{
disable = no
socket_type = stream
user = YOUR-SYSTEM-USERNAME
server = /opt/bin/svnserve
server_args = -i -r /opt/share/svn/repos
wait = no
nice = 10
only_from = 0.0.0.0/0
}
# and tatata, our lovely flash mem persistent save (reboot not necessary now)
Code:
flashfs save && flashfs commit && flashfs enable
# be sure you have xinet configured for starting up automatically
# you should have /opt/etc/init.d/S10xinetd or something like that.
# the svn daemon should everytime be started automatically if an connection request for the svn ports are detected by xinetd
# after the next reboot you should be able automaitcally
# to use svn in your LAN or free the port 3690 in your post-firewall and use subversion from all around the world :D
# i've tested all on wl-500gp and wl-hdd with TortoiseSVN and subclipse as
# clients from my winxp, but should also work with a different configuration.
# Thanks for this great forum.
# mefi
UPDATE (SOLVED SEE UPDATE2):
unfortunatelly there is a problem with /dev/random and the svn package. ( detail: http://rubylution.ping.de/articles/2...using-svnserve )
WORKAROUND:
if your svn client hangs then perform some commands on your wl-500gp like find / -name blah or top
Does anyone has an idea to solve this problem, permanantly?
There is a new package of svn available (1.4.6). maybe someone could compile for oleg fw
UPDATE2 (SOLVED SEE UPDATE3):
obviously dropbear uses randomly generated data while ssh session is active.
the easiest way not to get the above described "hanging" connection, just log off from your ssh console ;)
i wondered why this problem occured sporadic, now i know ;)
UPDATE3:
whole tutorial above updated.
I managed to solve the hanging-connection-due-to-low-entropy-problem by using the xinetd for fireing the svn process.
svn works now like a charm, i tested it by working on an university developing projekt concurrently with 3 other students. and with my own private reachable low cost svnserver i love the svn concept even more than before ;)
Meanwhile there is a new version of svn package available: svn_1.4.6-1_mipsel.ipk
correct firewall setup from outside?
Hi,
i've successfuly managed to install the svn and is working correctly.
The problem is that i am not able to connect to my svn repository from outside.
I guess i need to correctly setup my post-firewall script, but I really don't know how. Can someone send how the post-firewall script should look like with correct svn settings?
Right now my post-firewall looks like this (only one line to access the box via ssh from outside):
Code:
#!/bin/sh
# this opens the ssh port to internet! Be sure to have strong passwords!
iptables -I INPUT -m tcp -p tcp --dport 22 -j ACCEPT
Thanks!
