meface/docs/article/devops/svn.md

---
title: CentOS7 安装 SVN
date: 2023-01-07
author: ac
tags:
 - svn
categories: 
 - DevOps
---

### 1.安装服务

```shell
sudo yum install subversion
```

这条命令用来安装 `subversion` 软件包，该软件包同时包含服务端和客户端程序。

安装完成后，机器上会多出 `svn` ，`svnadmin`，`svnserve` 等命令。

- `svn` 是`subversion`的客户端命令行工具；
- `svnadmin` 和 `svnserve` 是服务端程序命令；

可以执行 `svn`  命令说明安装成功。

```shell
[root@VM-8-4-centos ~]# svn --version
svn, version 1.7.14 (r1542130)
   compiled Sep 30 2020, 17:44:04

Copyright (C) 2013 The Apache Software Foundation.
```

安装过程会在背后处理很多事情，其中一个就是“注册”了subversion服务，只不过是处于禁用状态。

```shell
[root@VM-8-4-centos ~]# systemctl list-unit-files --all | grep svn
svnserve.service                              disabled
```

简单分析一下这个服务。

1. `centos` 使用 `systemd` 作为 `init` 进程，它是个大管家。一个系统服务就是特定位置的一个 `.service` 文件。

   ```shell
   [root@VM-8-4-centos sysconfig]# systemctl show svnserve.service | grep Path
   FragmentPath=/usr/lib/systemd/system/svnserve.service
   ```

   所以 subversion 服务对应的文件就是`/usr/lib/systemd/system/svnserve.service`。

2. 查看 `svnserve.service`文件。

   ```shell
   [root@VM-8-4-centos sysconfig]# cat /usr/lib/systemd/system/svnserve.service
   [Unit]
   Description=Subversion protocol daemon
   After=syslog.target network.target
   
   [Service]
   Type=forking
   EnvironmentFile=/etc/sysconfig/svnserve
   ExecStart=/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid $OPTIONS
   
   [Install]
   WantedBy=multi-user.target
   ```

`svnserve.service`文件解析：

- `[Service]` 表明这是一个系统服务

- `ExecStart` 给出启动服务的命令

- `EnvironmentFile` 设置环境变量的配置文件地址，查看配置文件：

  ```shell
  [root@VM-8-4-centos sysconfig]# cat /etc/sysconfig/svnserve
  # OPTIONS is used to pass command-line arguments to svnserve.
  # 
  # Specify the repository location in -r parameter:
  OPTIONS="-r /var/svn"
  ```

所以启动服务实际执行的命令就会是：
`/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid -r /var/svn`
这里的` -r /var/svn `是指定了 `svn` 服务存放仓库的路径。
一个 `svn` 服务可以同时管理多个仓库，每个仓库就是 `/var/svn` 下的一个子目录。
**安装 `svn` 不会自动创建这个目录，所以需要手动创建。**



### 2.创建存放仓库

手动创建 `/var/svn` 目录，创建仓库 `reptest` ：

```shell
[root@VM-8-4-centos repositories]# mkdir -p /var/svn
[root@VM-8-4-centos repositories]# pth=/var/svn/reptest
[root@VM-8-4-centos repositories]# svnadmin create $pth
```

`svnadmin` 是服务端辅助管理工具，它可以创建空仓库。
项目中使用的仓库一般有 `trunk/`,` tags/`, `branches/ `三个子目录。这里只简单创建空的目录。

### 3.配置账号

每个仓库下都有 `conf/svnserve.conf` 文件，它是所在仓库的主配置文件。

```shell
[root@VM-8-4-centos conf]# cat svnserve.conf 
### This file controls the configuration of the svnserve daemon, if you
### use it to allow access to this repository.  (If you only allow
### access through http: and/or file: URLs, then this file is
### irrelevant.)

### Visit http://subversion.apache.org/ for more information.

[general]
### The anon-access and auth-access options control access to the
### repository for unauthenticated (a.k.a. anonymous) users and
### authenticated users, respectively.
### Valid values are "write", "read", and "none".
### Setting the value to "none" prohibits both reading and writing;
### "read" allows read-only access, and "write" allows complete 
### read/write access to the repository.
### The sample settings below are the defaults and specify that anonymous
### users have read-only access to the repository, while authenticated
### users have read and write access to the repository.
# anon-access = read
# auth-access = write
### The password-db option controls the location of the password
### database file.  Unless you specify a path starting with a /,
### the file's location is relative to the directory containing
### this configuration file.
### If SASL is enabled (see below), this file will NOT be used.
### Uncomment the line below to use the default password file.
# password-db = passwd
### The authz-db option controls the location of the authorization
### rules for path-based access control.  Unless you specify a path
### starting with a /, the file's location is relative to the the
### directory containing this file.  If you don't specify an
### authz-db, no path-based access control is done.
### Uncomment the line below to use the default authorization file.
# authz-db = authz
### This option specifies the authentication realm of the repository.
### If two repositories have the same authentication realm, they should
### have the same password database, and vice versa.  The default realm
### is repository's uuid.
# realm = My First Repository
### The force-username-case option causes svnserve to case-normalize
### usernames before comparing them against the authorization rules in the
### authz-db file configured above.  Valid values are "upper" (to upper-
### case the usernames), "lower" (to lowercase the usernames), and
### "none" (to compare usernames as-is without case conversion, which
### is the default behavior).
# force-username-case = none

[sasl]
### This option specifies whether you want to use the Cyrus SASL
### library for authentication. Default is false.
### This section will be ignored if svnserve is not built with Cyrus
### SASL support; to check, run 'svnserve --version' and look for a line
### reading 'Cyrus SASL authentication is available.'
# use-sasl = true
### These options specify the desired strength of the security layer
### that you want SASL to provide. 0 means no encryption, 1 means
### integrity-checking only, values larger than 1 are correlated
### to the effective key length for encryption (e.g. 128 means 128-bit
### encryption). The values below are the defaults.
# min-encryption = 0
# max-encryption = 256
```

在 `svnserve.conf` 文件中有几处需要修改：

```shell
[general]
#匿名访问的权限，可以是read,write,none,默认为read
anon-access=none
#使授权用户有写权限
auth-access=write
#指定用户名口令文件
password-db=passwd
#指定权限文件，当前目录下的authz文件
authz-db=authz
#认证命名空间，subversion会在认证提示里显示，并且作为凭证缓存的关键字
realm=/var/svn/reptest
```

**配置权限配置文件authz**

```shell
[groups]            
#用户组
admin = admin,root,test  
#用户组所对应的用户
[/]                 
#库目录权限
@admin = rw         
#用户组权限
*=r               
#非用户组权限
```

**配置用户口令文件passwd**

```shell
[users]
# harry = harryssecret
# sally = sallyssecret
admin = Admin1234
root = root1234
test = test1234
```

> `svnserve.conf:19: option expected`
>
> 注意修改配置文件时，应把删除注释后的配置前面的空格也删除掉，顶格写。

### 4.启动服务

```shell
systemctl start svnserve.service
```

问题1：`svnserve: E000098: Can't bind server socket: Address already in use`

```shell
[root@VM-8-4-centos conf]# systemctl status svnserve.service
● svnserve.service - Subversion protocol daemon
   Loaded: loaded (/usr/lib/systemd/system/svnserve.service; disabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Thu 2023-03-09 09:18:18 CST; 4min 10s ago
  Process: 14768 ExecStart=/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid $OPTIONS (code=exited, status=1/FAILURE)

Mar 09 09:18:18 VM-8-4-centos systemd[1]: Starting Subversion protocol daemon...
Mar 09 09:18:18 VM-8-4-centos svnserve[14768]: svnserve: E000098: Can't bind server socket: Address already in use
Mar 09 09:18:18 VM-8-4-centos systemd[1]: svnserve.service: control process exited, code=exited status=1
Mar 09 09:18:18 VM-8-4-centos systemd[1]: Failed to start Subversion protocol daemon.
Mar 09 09:18:18 VM-8-4-centos systemd[1]: Unit svnserve.service entered failed state.
Mar 09 09:18:18 VM-8-4-centos systemd[1]: svnserve.service failed.
```

解决方法：

```shell
# 先kill掉原来的svnserve，再启动
[root@VM-8-4-centos conf]# killall svnserve
[root@VM-8-4-centos conf]# systemctl start svnserve.service
[root@VM-8-4-centos conf]# systemctl status svnserve.service
● svnserve.service - Subversion protocol daemon
   Loaded: loaded (/usr/lib/systemd/system/svnserve.service; disabled; vendor preset: disabled)
   Active: active (running) since Thu 2023-03-09 09:22:38 CST; 5s ago
  Process: 26302 ExecStart=/usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid $OPTIONS (code=exited, status=0/SUCCESS)
 Main PID: 26303 (svnserve)
   CGroup: /system.slice/svnserve.service
           └─26303 /usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid -r /var/svn

Mar 09 09:22:38 VM-8-4-centos systemd[1]: Starting Subversion protocol daemon...
Mar 09 09:22:38 VM-8-4-centos systemd[1]: Started Subversion protocol daemon.

```

### 5.设置服务开机启动

```shell
systemctl enable svnserve.service
```



### 6. 开放端口

```shell
# 查看svn是否在运行，svn的默认端口是3690
[root@VM-8-4-centos conf]# netstat -tunlp|grep 3690
tcp        0      0 0.0.0.0:3690            0.0.0.0:*               LISTEN      26303/svnserve 
[root@VM-8-4-centos conf]# firewall-cmd --state
running
#添加端口
[root@VM-8-4-centos conf]# firewall-cmd --permanent --add-port=3690/tcp
Warning: ALREADY_ENABLED: 3690:tcp
success
#重启防火墙
[root@VM-8-4-centos conf]# service firewalld restart
Redirecting to /bin/systemctl restart firewalld.service
[root@VM-8-4-centos conf]# firewall-cmd --list-ports
3690/tcp
```



### 7.检出使用

![image-20230309095243364](./images/image-20230309095243364.png)

![image-20230309095403041](./images/image-20230309095403041.png)



## 参考文章

[1] Centos7安装svn服务 [https://blog.csdn.net/chenxizhan1995/article/details/110687345](https://blog.csdn.net/chenxizhan1995/article/details/110687345)

[2] CentOS 7 安装配置SVN服务器 [https://www.jianshu.com/p/4e3dd253a209](https://www.jianshu.com/p/4e3dd253a209)