1 #!/bin/bash
2 #
3 # 在Linux(CentOS 6.6)服务器上安装并配置基于Apache的SVN服务器：
4 #
5 # 1、安装服务
6 # 2、创建svn版本库
7 # 3、创建svn用户
8 # 4、配置svn权限
9 # 5、配置http访问
10 #
11
12 #
13 # 1、安装服务
14 #
15
16 # 1.1、安装程序包：subversion httpd mod_dav_svn
17
18 yum install subversion httpd mod_dav_svn -y >> $0.log
19 if [[ $? != 0 ]]
20 then
21 echo "安装服务失败，停止svn部署"
22 exit 1
23 fi
24
25 #
26 # 2、创建svn版本库
27 #
28
29 # 2.1、定义svn版本库存放目录
30 svn_path=/svn
31 # 2.2、创建svn版本库存放目录
32 mkdir -p $svn_path
33 # 2.3、定义要创建版本库的名称
34 repo_name=mysvn5
35 # 2.4、创建新的版本库
36 if [[ -d $svn_path/$repo_name ]]
37 then
38 echo "版本库 $repo_name 已经存在"
39 exit 1
40 fi
41 svnadmin create $svn_path/$repo_name
42 # 2.5、配置svn版本库的属主属组为http服务的启动用户
43 chown apache.apache -R $svn_path
44 # 2.6、确认新创建的svn版本库已经生成，且文件属主属组正确
45 ls -l $svn_path/$repo_name >> $0.log
46
47 #
48 # 3、创建svn用户
49 #
50
51 # 3.1、创建svn管理员账号
52 admin_passwd=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c9)
53 htpasswd -c -b -m $svn_path/$repo_name/conf/passwd admin $admin_passwd
54 echo "$repo_name 版本库的管理员账号为 admin ，密码是 $admin_passwd " |tee -a $0.log
55
56 # 3.2、创建svn具有读写权限的账号
57 rw_user_passwd=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c9)
58 htpasswd -b -m $svn_path/$repo_name/conf/passwd rw_user $rw_user_passwd
59 echo "$repo_name 版本库的读写账号为 rw_user ，密码是 $rw_user_passwd " |tee -a $0.log
60
61 # 3.3、创建svn具有只读权限的账号
62 ro_user_passwd=$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c9)
63 htpasswd -b -m $svn_path/$repo_name/conf/passwd ro_user $ro_user_passwd
64 echo "$repo_name 版本库的只读账号为 ro_user ，密码是 $ro_user_passwd " |tee -a $0.log
65
66 #
67 # 4、配置svn权限
68 #
69
70 # 4.1、设置权限节点
71 echo "[$repo_name:/]" >>$svn_path/$repo_name/conf/authz
72 # 4.2、配置管理员账号有“读写”权限
73 echo "admin = rw" >>$svn_path/$repo_name/conf/authz
74 # 4.3、配置读写账号有“读写”权限
75 echo "rw_user = rw" >>$svn_path/$repo_name/conf/authz
76 # 4.4、配置只读账号有“只读”权限
77 echo "ro_user = r" >>$svn_path/$repo_name/conf/authz
78
79 #
80 # 5、配置http访问
81 #
82
83 echo '<Location /svn/'$repo_name'>' >> /etc/httpd/conf.d/subversion.conf
84 # 定义svn类型的http服务，会调用dav_svn_module
85 echo ' DAV svn' >> /etc/httpd/conf.d/subversion.conf
86 # svn版本库目录
87 echo ' SVNPath '$svn_path'/'$repo_name'' >> /etc/httpd/conf.d/subversion.conf
88 # svn访问权限的配置文件
89 echo ' AuthzSVNAccessFile '$svn_path'/'$repo_name'/conf/authz' >> /etc/httpd/conf.d/subversion.conf
90 # svn使用http基本验证方式验证账号身份
91 echo ' AuthType Basic' >> /etc/httpd/conf.d/subversion.conf
92 # http基本验证的提示信息
93 echo ' AuthName "Authorization repot SVN"' >> /etc/httpd/conf.d/subversion.conf
94 # svn账号配置文件，包含加密后的密码信息
95 echo ' AuthUserFile '$svn_path'/'$repo_name'/conf/passwd' >> /etc/httpd/conf.d/subversion.conf
96 # 仅允许通过验证的用户访问svn
97 echo ' Require valid-user' >> /etc/httpd/conf.d/subversion.conf
98 echo '</Location>' >> /etc/httpd/conf.d/subversion.conf
99
100 # 重启http服务
101 /etc/init.d/httpd restart
102 # 设置http服务开机启动
103 chkconfig httpd on
104 # 在防火墙上开放http服务
105 iptables -I INPUT -p tcp --dport 80 -m state --state NEW -j ACCEPT
106 /etc/init.d/iptables save
107 # 关闭selinux
108 setenforce 0
109
110 #
111 # 6、提交代码时必须写注释，且不能少于10个字符；允许修改注释
112 #
113
114 cp $svn_path/$repo_name/hooks/pre-commit.tmpl $svn_path/$repo_name/hooks/pre-commit
115
116 sed -i '75a LOGMSG=$($SVNLOOK log -t "$TXN" "$REPOS" | grep "[a-zA-Z0-9]" | wc -c)\nif [ "$LOGMSG" -lt 10 ]; then\necho -e "\n 提交文件时必须添加注释，提交中止."1>&2\nexit 1\nfi' $svn_path/$repo_name/hooks/pre-commit
117
118 sed -i 's/^commit-access-control.pl/#commit-access-control.pl/' $svn_path/$repo_name/hooks/pre-commit
119
120 chmod +x $svn_path/$repo_name/hooks/pre-commit
121
122 cp $svn_path/$repo_name/hooks/pre-revprop-change.tmpl $svn_path/$repo_name/hooks/pre-revprop-change
123
124 chmod +x $svn_path/$repo_name/hooks/pre-revprop-change
