qiusj
/
meface
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
meface/docs/article/devops/svn.md

308 lines
10 KiB
Markdown
Raw Normal View History

init project
2023-11-17 10:54:23 +08:00
---
title: CentOS7 安装 SVN
date: 2023-01-07
author: ac
tags:
- svn
categories:
- DevOps
---
### 1.安装服务
```shell
sudo yum install subversion
```
这条命令用来安装 `subversion` 软件包，该软件包同时包含服务端和客户端程序。
安装完成后，机器上会多出 `svn` ，`svnadmin`，`svnserve` 等命令。
- `svn` 是`subversion`的客户端命令行工具；
- `svnadmin` 和 `svnserve` 是服务端程序命令；
可以执行 `svn` 命令说明安装成功。
```shell
[root@VM-8-4-centos ~]# svn --version
svn, version 1.7.14 (r1542130)
compiled Sep 30 2020, 17:44:04
Copyright (C) 2013 The Apache Software Foundation.
```
安装过程会在背后处理很多事情，其中一个就是“注册”了subversion服务，只不过是处于禁用状态。
```shell
[root@VM-8-4-centos ~]# systemctl list-unit-files --all | grep svn
svnserve.service disabled
```
简单分析一下这个服务。
1. `centos` 使用 `systemd` 作为 `init` 进程，它是个大管家。一个系统服务就是特定位置的一个 `.service` 文件。
```shell
[root@VM-8-4-centos sysconfig]# systemctl show svnserve.service | grep Path
FragmentPath=/usr/lib/systemd/system/svnserve.service
```
所以 subversion 服务对应的文件就是`/usr/lib/systemd/system/svnserve.service`。
2. 查看 `svnserve.service`文件。
```shell
[root@VM-8-4-centos sysconfig]# cat /usr/lib/systemd/system/svnserve.service
[Unit]
Description=Subversion protocol daemon
After=syslog.target network.target
[Service]
Type=forking
EnvironmentFile=/etc/sysconfig/svnserve
ExecStart=/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid $OPTIONS
[Install]
WantedBy=multi-user.target
```
`svnserve.service`文件解析：
- `[Service]` 表明这是一个系统服务
- `ExecStart` 给出启动服务的命令
- `EnvironmentFile` 设置环境变量的配置文件地址，查看配置文件：
```shell
[root@VM-8-4-centos sysconfig]# cat /etc/sysconfig/svnserve
# OPTIONS is used to pass command-line arguments to svnserve.
#
# Specify the repository location in -r parameter:
OPTIONS="-r /var/svn"
```
所以启动服务实际执行的命令就会是：
`/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid -r /var/svn`
这里的` -r /var/svn `是指定了 `svn` 服务存放仓库的路径。
一个 `svn` 服务可以同时管理多个仓库，每个仓库就是 `/var/svn` 下的一个子目录。
**安装 `svn` 不会自动创建这个目录，所以需要手动创建。**
### 2.创建存放仓库
手动创建 `/var/svn` 目录，创建仓库 `reptest` ：
```shell
[root@VM-8-4-centos repositories]# mkdir -p /var/svn
[root@VM-8-4-centos repositories]# pth=/var/svn/reptest
[root@VM-8-4-centos repositories]# svnadmin create $pth
```
`svnadmin` 是服务端辅助管理工具，它可以创建空仓库。
项目中使用的仓库一般有 `trunk/`,` tags/`, `branches/ `三个子目录。这里只简单创建空的目录。
### 3.配置账号
每个仓库下都有 `conf/svnserve.conf` 文件，它是所在仓库的主配置文件。
```shell
[root@VM-8-4-centos conf]# cat svnserve.conf
### This file controls the configuration of the svnserve daemon, if you
### use it to allow access to this repository. (If you only allow
### access through http: and/or file: URLs, then this file is
### irrelevant.)
### Visit http://subversion.apache.org/ for more information.
[general]
### The anon-access and auth-access options control access to the
### repository for unauthenticated (a.k.a. anonymous) users and
### authenticated users, respectively.
### Valid values are "write", "read", and "none".
### Setting the value to "none" prohibits both reading and writing;
### "read" allows read-only access, and "write" allows complete
### read/write access to the repository.
### The sample settings below are the defaults and specify that anonymous
### users have read-only access to the repository, while authenticated
### users have read and write access to the repository.
# anon-access = read
# auth-access = write
### The password-db option controls the location of the password
### database file. Unless you specify a path starting with a /,
### the file's location is relative to the directory containing
### this configuration file.
### If SASL is enabled (see below), this file will NOT be used.
### Uncomment the line below to use the default password file.
# password-db = passwd
### The authz-db option controls the location of the authorization
### rules for path-based access control. Unless you specify a path
### starting with a /, the file's location is relative to the the
### directory containing this file. If you don't specify an
### authz-db, no path-based access control is done.
### Uncomment the line below to use the default authorization file.
# authz-db = authz
### This option specifies the authentication realm of the repository.
### If two repositories have the same authentication realm, they should
### have the same password database, and vice versa. The default realm
### is repository's uuid.
# realm = My First Repository
### The force-username-case option causes svnserve to case-normalize
### usernames before comparing them against the authorization rules in the
### authz-db file configured above. Valid values are "upper" (to upper-
### case the usernames), "lower" (to lowercase the usernames), and
### "none" (to compare usernames as-is without case conversion, which
### is the default behavior).
# force-username-case = none
[sasl]
### This option specifies whether you want to use the Cyrus SASL
### library for authentication. Default is false.
### This section will be ignored if svnserve is not built with Cyrus
### SASL support; to check, run 'svnserve --version' and look for a line
### reading 'Cyrus SASL authentication is available.'
# use-sasl = true
### These options specify the desired strength of the security layer
### that you want SASL to provide. 0 means no encryption, 1 means
### integrity-checking only, values larger than 1 are correlated
### to the effective key length for encryption (e.g. 128 means 128-bit
### encryption). The values below are the defaults.
# min-encryption = 0
# max-encryption = 256
```
在 `svnserve.conf` 文件中有几处需要修改：
```shell
[general]
#匿名访问的权限，可以是read,write,none,默认为read
anon-access=none
#使授权用户有写权限
auth-access=write
#指定用户名口令文件
password-db=passwd
#指定权限文件，当前目录下的authz文件
authz-db=authz
#认证命名空间，subversion会在认证提示里显示，并且作为凭证缓存的关键字
realm=/var/svn/reptest
```
**配置权限配置文件authz**
```shell
[groups]
#用户组
admin = admin,root,test
#用户组所对应的用户
[/]
#库目录权限
@admin = rw
#用户组权限
*=r
#非用户组权限
```
**配置用户口令文件passwd**
```shell
[users]
# harry = harryssecret
# sally = sallyssecret
admin = Admin1234
root = root1234
test = test1234
```
> `svnserve.conf:19: option expected`
>
> 注意修改配置文件时，应把删除注释后的配置前面的空格也删除掉，顶格写。
### 4.启动服务
```shell
systemctl start svnserve.service
```
问题1：`svnserve: E000098: Can't bind server socket: Address already in use`
```shell
[root@VM-8-4-centos conf]# systemctl status svnserve.service
● svnserve.service - Subversion protocol daemon
Loaded: loaded (/usr/lib/systemd/system/svnserve.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Thu 2023-03-09 09:18:18 CST; 4min 10s ago
Process: 14768 ExecStart=/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid $OPTIONS (code=exited, status=1/FAILURE)
Mar 09 09:18:18 VM-8-4-centos systemd[1]: Starting Subversion protocol daemon...
Mar 09 09:18:18 VM-8-4-centos svnserve[14768]: svnserve: E000098: Can't bind server socket: Address already in use
Mar 09 09:18:18 VM-8-4-centos systemd[1]: svnserve.service: control process exited, code=exited status=1
Mar 09 09:18:18 VM-8-4-centos systemd[1]: Failed to start Subversion protocol daemon.
Mar 09 09:18:18 VM-8-4-centos systemd[1]: Unit svnserve.service entered failed state.
Mar 09 09:18:18 VM-8-4-centos systemd[1]: svnserve.service failed.
```
解决方法：
```shell
# 先kill掉原来的svnserve，再启动
[root@VM-8-4-centos conf]# killall svnserve
[root@VM-8-4-centos conf]# systemctl start svnserve.service
[root@VM-8-4-centos conf]# systemctl status svnserve.service
● svnserve.service - Subversion protocol daemon
Loaded: loaded (/usr/lib/systemd/system/svnserve.service; disabled; vendor preset: disabled)
Active: active (running) since Thu 2023-03-09 09:22:38 CST; 5s ago
Process: 26302 ExecStart=/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid $OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 26303 (svnserve)
CGroup: /system.slice/svnserve.service
└─26303 /usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid -r /var/svn
Mar 09 09:22:38 VM-8-4-centos systemd[1]: Starting Subversion protocol daemon...
Mar 09 09:22:38 VM-8-4-centos systemd[1]: Started Subversion protocol daemon.
```
### 5.设置服务开机启动
```shell
systemctl enable svnserve.service
```
### 6. 开放端口
```shell
# 查看svn是否在运行，svn的默认端口是3690
[root@VM-8-4-centos conf]# netstat -tunlp|grep 3690
tcp 0 0 0.0.0.0:3690 0.0.0.0:* LISTEN 26303/svnserve
[root@VM-8-4-centos conf]# firewall-cmd --state
running
#添加端口
[root@VM-8-4-centos conf]# firewall-cmd --permanent --add-port=3690/tcp
Warning: ALREADY_ENABLED: 3690:tcp
success
#重启防火墙
[root@VM-8-4-centos conf]# service firewalld restart
Redirecting to /bin/systemctl restart firewalld.service
[root@VM-8-4-centos conf]# firewall-cmd --list-ports
3690/tcp
```
### 7.检出使用
![image-20230309095243364](./images/image-20230309095243364.png)
![image-20230309095403041](./images/image-20230309095403041.png)
## 参考文章
[1] Centos7安装svn服务 [https://blog.csdn.net/chenxizhan1995/article/details/110687345](https://blog.csdn.net/chenxizhan1995/article/details/110687345)
[2] CentOS 7 安装配置SVN服务器 [https://www.jianshu.com/p/4e3dd253a209](https://www.jianshu.com/p/4e3dd253a209)