centos7搭建svn服务器及客户端设置

centos7搭建svn服务器及客户端设置

centos7貌似预装了svn服务（有待确认），因此我们直接启动该服务即可

一、svn服务端配置（服务器IP假设为192.168.100.1）

步骤1：创建存放代码库目录

mkdir -p /var/svn

步骤2：启动svn服务

svnserve -d -r /var/svn

步骤3：创建代码库something

[root@model ~]# cd /var/svn
[root@model svn]#  
[root@model svn]# 
[root@model svn]# svnadmin create something
[root@model svn]# 
[root@model svn]# 
[root@model svn]# cd something
[root@model something]# 
[root@model something]# 
[root@model something]# ls
conf  db  format  hooks  locks  README.txt
[root@model something]# 
[root@model something]# 
[root@model something]# cd conf
[root@model conf]# 
[root@model conf]# 
[root@model conf]# ls
authz  passwd  svnserve.conf
[root@model conf]# 
[root@model conf]# 

步骤4：配置svnserve.conf文件

[root@model conf]# 
[root@model conf]# vi svnserve.conf
### This file controls the configuration of the svnserve daemon, if you
### use it to allow access to this repository.  (If you only allow
### access through http: and/or file: URLs, then this file is
### irrelevant.)
Visit http://subversion.apache.org/ for more information.

[general]
### The anon-access and auth-access options control access to the
### repository for unauthenticated (a.k.a. anonymous) users and
### authenticated users, respectively.
### Valid values are "write", "read", and "none".
### Setting the value to "none" prohibits both reading and writing;
### "read" allows read-only access, and "write" allows complete
### read/write access to the repository.
### The sample settings below are the defaults and specify that anonymous
### users have read-only access to the repository, while authenticated
### users have read and write access to the repository.
# anon-access = read
# auth-access = write
anon-access = none

auth-access = write
The password-db option controls the location of the password
database file.  Unless you specify a path starting with a /,
the file's location is relative to the directory containing
this configuration file.
If SASL is enabled (see below), this file will NOT be used.
Uncomment the line below to use the default password file.
password-db = passwd
password-db = passwd
The authz-db option controls the location of the authorization
rules for path-based access control.  Unless you specify a path
starting with a /, the file's location is relative to the the
directory containing this file.  If you don't specify an
authz-db, no path-based access control is done.
Uncomment the line below to use the default authorization file.
authz-db = authz
authz-db = authz
This option specifies the authentication realm of the repository.
If two repositories have the same authentication realm, they should
have the same password database, and vice versa.  The default realm
is repository's uuid.
realm = My First Repository

#此选项指定的库的认证领域
raalm = /var/svn/something

The force-username-case option causes svnserve to case-normalize
usernames before comparing them against the authorization rules in the
authz-db file configured above.  Valid values are "upper" (to upper-
case the usernames), "lower" (to lowercase the usernames), and
"none" (to compare usernames as-is without case conversion, which
is the default behavior).
force-username-case = none
[sasl]
This option specifies whether you want to use the Cyrus SASL
library for authentication. Default is false.
This section will be ignored if svnserve is not built with Cyrus
SASL support; to check, run 'svnserve --version' and look for a line
reading 'Cyrus SASL authentication is available.'
use-sasl = true
These options specify the desired strength of the security layer
that you want SASL to provide. 0 means no encryption, 1 means
integrity-checking only, values larger than 1 are correlated
"svnserve.conf" 71L, 3173C written

步骤5：配置passwd文件

[root@model conf]# vi passwd
### This file is an example password file for svnserve.
### Its format is similar to that of svnserve.conf. As shown in the
### example below it contains one section labelled [users].
### The name and password for each user follow, one account per line.
[users]
harry = harryssecret
sally = sallyssecret
user = 123456
~

~

"passwd" 11L, 326C written

步骤6：配置authz文件

[root@model conf]# 
[root@model conf]# vi authz
### This file is an example authorization file for svnserve.
### Its format is identical to that of mod_authz_svn authorization
### files.
### As shown below each section defines authorizations for the path and
### (optional) repository specified by the section name.
### The authorizations follow. An authorization line can refer to:
###  - a single user,
###  - a group of users defined in a special [groups] section,
###  - an alias defined in a special [aliases] section,
###  - all authenticated users, using the '$authenticated' token,
###  - only anonymous users, using the '$anonymous' token,
###  - anyone, using the '*' wildcard.
###
### A match can be inverted by prefixing the rule with '~'. Rules can
### grant read ('r') access, read-write ('rw') access, or no access
### ('').
[aliases]
joe = /C=XZ/ST=Dessert/L=Snake City/O=Snake Oil, Ltd./OU=Research Institute/CN=Joe Average
[groups]
harry_and_sally = harry,sally
harry_sally_and_joe = harry,sally,&joe

admin = user

[/foo/bar]
harry = rw
&joe = r
* =

[/]
user = rw

# [repository:/baz/fuz]
# @harry_and_sally = rw
# * = r

[something:/]
@admin = rw
~
~
~
~
~
~
"authz" 35L, 1093C written

此处的意思是用户usr_0对目录[/]（代码库something的根目录）下的所有文件，具有读（r）和写（w）的权限

步骤7：关闭防火墙及防火墙开机自启动

systemctl stop firewalld.service

systemctl disable firewalld.service

至此，svn服务端配置完毕

二、svn客户端配置（客户端IP假设为192.168.100.2）

步骤1：关闭防火墙

[root@localhost svn]# 
[root@localhost svn]# systemctl stop firewalld.service
[root@localhost svn]# 
[root@localhost svn]# systemctl disable firewalld.service
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service.
[root@localhost svn]# 

步骤2：创建客户端svn上提取文件存放目录

[root@localhost /]# 
[root@localhost /]# mkdir /svn
[root@localhost /]# 
[root@localhost /]# 

步骤3：登录svn服务器并检出something库中的文件

[root@localhost svn]# 
[root@localhost svn]# 
[root@localhost svn]# svn co --username user --password 123456 svn://192.168.100.1/something
-----------------------------------------------------------------------

注意!  你的密码，对于认证域:
<svn://192.168.100.1:3690> /var/svn/something



只能明文保存在磁盘上!  如果可能的话，请考虑配置你的系统，让 Subversion

可以保存加密后的密码。请参阅文档以获得详细信息。
你可以通过在“/root/.subversion/servers”中设置选项“store-plaintext-passwords”为“yes”或“no”，

来避免再次出现此警告。

-----------------------------------------------------------------------

保存未加密的密码(yes/no)?n

A    something/package

A    something/package/apache-maven-3.5.0-bin.tar.gz

A    something/package/mysql-5.6.37-linux-glibc2.12-x86_64.tar.gz

A    something/package/jdk-8u141-linux-x64.gz

A    something/package/apache-tomcat-7.0.79.tar.gz

取出版本 6。

[root@localhost svn]#

[root@localhost svn]# ls

something

[root@localhost svn]#

[root@localhost svn]# 

更新svn版本库

[root@localhost package]# 
[root@localhost package]# 
[root@localhost package]# svn up /svn/something
正在升级 '/svn/something':
认证领域: <svn://192.168.100.1:3690> /var/svn/something
“user”的密码: 
-----------------------------------------------------------------------

注意!  你的密码，对于认证域:
<svn://192.168.100.1:3690> /var/svn/something



只能明文保存在磁盘上!  如果可能的话，请考虑配置你的系统，让 Subversion

可以保存加密后的密码。请参阅文档以获得详细信息。
你可以通过在“/root/.subversion/servers”中设置选项“store-plaintext-passwords”为“yes”或“no”，

来避免再次出现此警告。

-----------------------------------------------------------------------

保存未加密的密码(yes/no)?n

D    jenkins.war

更新到版本 7。

[root@localhost package]#

[root@localhost package]#

[root@localhost package]# 

查看全文