install
author Paul Crowley <paul@lshift.net>
Sat, 07 Mar 2009 10:11:02 +0000
changeset 88 ae1503386576
parent 87 535502c18eaa
child 89 30a8be7ce326
permissions -rwxr-xr-x
Added tag release_0.5 for changeset 535502c18eaa

#!/usr/bin/env python

import sys
import shutil
import os
import pwd
import subprocess
import optparse

oparser = optparse.OptionParser()

oparser.add_option("--prefix")
oparser.add_option("--root")
oparser.set_defaults(root="", prefix="/usr/local")
(options, args) = oparser.parse_args()

if len(args) > 0:
    oparser.print_help()
    sys.exit(-1)

# This must be run as root, because it must create an hg user.
# Normally the clean thing to do is let it fail with a permission error
# if a non-root user tries to run it, but I don't want anyone thinking
# that they can make it work as non-root by changing install paths.
# Patches welcome for doing this more cleanly of course.

if os.getgid() != 0:
    print >>sys.stderr, "Install must be run as root user"
    sys.exit(-1)

dest = options.prefix + "/lib/mercurial-server"

def installFiles(d, *sources):
    d = options.root + d
    os.makedirs(d)
    for f in sources:
        shutil.copy(f, d)

installFiles(dest,
    'src/hg-ssh',
    'src/refresh-auth')
installFiles(dest + '/mercurialserver',
    'src/mercurialserver/__init__.py',
    'src/mercurialserver/paths.py',
    'src/mercurialserver/changes.py',
    'src/mercurialserver/access.py',
    'src/mercurialserver/servelog.py',
    'src/mercurialserver/refreshauth.py',
    'src/mercurialserver/ruleset.py')
installFiles(dest + '/init',
    'src/init/hginit',
    'src/init/hgadmin-hgrc')
installFiles('/etc/mercurial-server',
    'src/init/conf/remote-hgrc',
    'src/init/conf/access.conf')
installFiles('/etc/mercurial-server/keys/root')
installFiles('/etc/mercurial-server/keys/users')

def becomeFunc(u):
    p = pwd.getpwnam(u)
    def become():
        os.setgid(p.pw_gid)
        os.setegid(p.pw_gid)
        os.setuid(p.pw_uid)
        os.seteuid(p.pw_uid)
    return become

try:
   pwd.getpwnam('hg')
except KeyError:
    subprocess.check_call(
        "adduser --system --shell /bin/sh --group --disabled-password".split() + 
        ["--gecos", "Mercurial repositories", "hg"])
    subprocess.check_call([dest + '/init/hginit'], preexec_fn = becomeFunc('hg'))