1掉丽、安裝GIT
yum install git
git --version
接下來創(chuàng)建一個(gè)git用戶組和用戶套蒂，用來運(yùn)行g(shù)it服務(wù)：
groupadd git
adduser git -g git
passwd git
2的榛、創(chuàng)建證書登錄
收集所有需要登錄的用戶的公鑰,公鑰位于id_rsa.pub文件中,把公鑰導(dǎo)入/home/git/.ssh/authorized_keys文件里结澄，一行一個(gè)赞辩。如果沒有該文件創(chuàng)建它
git 安裝及配置參考
cd /home/git/
mkdir .ssh
chmod 700 .ssh
touch .ssh/authorized_keys
chmod 600 .ssh/authorized_keys
3朴沿、初始化Git倉(cāng)庫(kù)
首先我們選定一個(gè)目錄作為Git倉(cāng)庫(kù)猜谚，假定是/usr/local/git/project.git， 在/usr/local/git目錄下輸入命令：
cd /usr/local
mkdir git
chown git:git git/
cd git
git init --bare project.git
以上命令Git創(chuàng)建一個(gè)空倉(cāng)庫(kù)赌渣，服務(wù)器上的Git倉(cāng)庫(kù)通常都以.git結(jié)尾魏铅。然后，把倉(cāng)庫(kù)所屬用戶改為git：
chown -R git:git project.git
4坚芜、克隆倉(cāng)庫(kù)
git clone git@192.168.33.10:/usr/local/git/project.git #可能需要輸入git用戶密碼
git clone root@192.168.33.10:/usr/local/git/project.git #此時(shí)輸入root密碼
192.168.33.10 為 Git 所在服務(wù)器 ip
5览芳、禁止git用戶shell登錄
vi /etc/passwd
修改git的bash 從/bin/bash改為/usr/bin/git-shell
6、基于Nginx配置http(s)
安裝相關(guān)依賴
如果希望用nginx做webserver鸿竖，則需要另外的fcgiwrap以及spawn-fcgi沧竟。
具體的邏輯則是：nginx若要支持git-http-backend，需要fcgiwarp的幫助缚忧。而如果希望fcgiwarp以daemon方式運(yùn)行悟泵，則需要spawn-fcgi
yum install fcgi-devel spawn-fcgi
git clone https://github.com/gnosek/fcgiwrap.git
cd fcgiwrap
autoreconf -i
./configure
make && make install
借用github上別人寫的啟動(dòng)腳本，按照自己的實(shí)際環(huán)境搔谴，修改好放置/etc/init.d/下
#!/bin/sh
#
# git-fcgi The Git HTTP/FastCGI server
#
# chkconfig: - 80 20
# processname: git-fcgi
# description: Git HTTP/FastCGI server
# pidfile: /var/run/git-fcgi.pid
### BEGIN INIT INFO
# Provides: git-fcgi
# Required-Start: $local_fs $remote_fs $network
# Required-Stop: $local_fs $remote_fs $network
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: Start and stop Git HTTP/FastCGI server
### END INIT INFO
# Source function library.
. /etc/init.d/functions
# Config & Vars
prog=git-fcgi
childs=1
pidfile=/var/run/git-fcgi.pid
lockfile=/var/lock/subsys/git-fcgi
sockfile=/var/run/git-fcgi.sock
sockmode=0700;
sockuser=nginx
sockgroup=nginx
proguser=git
proggroup=git
gitexec=/usr/libexec/git-core/git-http-backend
fcgiexec=/usr/local/sbin/fcgiwrap
spawnexec=/usr/bin/spawn-fcgi
progexec="${spawnexec} -u ${proguser} -g ${proggroup} -U ${sockuser} -G ${sockgroup} -P ${pidfile} -s ${sockfile} -M ${sockmode} -- ${fcgiexec} -f -c ${childs} -p ${gitexec}"
RETVAL=0
# Functions
start() {
echo -n $"Starting ${prog}: "
[ -n "${sockfile}" -a -S "${sockfile}" ] && rm -f ${sockfile}
daemon "${progexec} > /dev/null"
RETVAL=$?
echo
[ $RETVAL = 0 ] && touch ${lockfile}
return $RETVAL
}
stop() {
echo -n $"Stopping ${prog}: "
[ -n "${sockfile}" -a -S "${sockfile}" ] && rm -f ${sockfile}
killproc -p ${pidfile} ${prog}
RETVAL=$?
echo
[ $RETVAL = 0 ] && rm -f ${lockfile} ${pidfile}
return $RETVAL
}
restart() {
stop
start
}
reload() {
restart
}
force_reload() {
restart
}
rh_status() {
status -p ${pidfile} ${prog}
}
# Main
case "$1" in
start)
rh_status > /dev/null 2>&1 && exit 0
start
;;
stop)
stop
;;
status)
rh_status
RETVAL=$?
;;
restart)
restart
;;
reload)
reload
;;
force-reload)
force_reload
;;
condrestart|try-restart)
if rh_status > /dev/null 2>&1; then
restart
fi
;;
*)
echo $"Usage: $prog {start|stop|restart|reload|force_reload|condrestart|try-restart|status|help}"
RETVAL=2
esac
exit $RETVAL
<p></p>
chmod u+x /etc/init.d/git-fcgi
service git-fcgi start
chkconfig git-fcgi on
#將git倉(cāng)庫(kù)的所屬權(quán)限修改為$proguser
chown -R git.git yougit_dir
7魁袜、配置nginx
#Git nginx conf
server {
listen 80;
server_name yougit.git.com;
#return 301 https://$server_name$request_uri;
root /data/git/;
error_log /var/log/nginx/git.error.log warn;
access_log /var/log/nginx/git.access.log main;
location ~ ^/([^/]+\.git)(/.*|$) {
include fastcgi_params;
fastcgi_param PATH_INFO $uri;
fastcgi_param REMOTE_USER $remote_user;
fastcgi_param SCRIPT_FILENAME /usr/libexec/git-core/git-http-backend;
fastcgi_param GIT_PROJECT_ROOT $document_root;
fastcgi_param GIT_HTTP_EXPORT_ALL "";
fastcgi_pass unix:/var/run/git-fcgi.sock;
}
}
現(xiàn)在，你可以使用git clone http://xxx.xxx/**.git 的方式操作了敦第。
尾巴
若需要使用驗(yàn)證峰弹，可使用htpasswd生成用戶名以及密碼，再配置到nginx的配置文件中芜果。若倉(cāng)庫(kù)接收git push時(shí)報(bào)錯(cuò)403鞠呈，可在倉(cāng)庫(kù)中設(shè)置
git config http.receivepack true
參考資料
https://www.yvanz.com/2016/06/01/Git-server-with-http(s)-protocol.html
