|
Has anyone ever set up a local git repository?
Specifically, one that can be connected to not only locally, but remotely as well.
I'm thinking of using a Raspberry Pi 4 with a connected 500gb SSD (that should be plenty pig enough I think).
I don't want to use GitHub because they've been hacked a couple of times (unless someone here thinks it's secure enough).
I'm concerned with the amount of hassle required to install git locally, so I'm hesitant.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
modified 23-Apr-21 7:10am.
|
|
|
|
|
Gitlab Omnibus is pretty simple and it's a rockstar.
"Never attribute to malice that which can be explained by stupidity."
- Hanlon's Razor
|
|
|
|
|
Haven't done this myself but git-scm has a chapter on it so that may help 
|
|
|
|
|
I set up a GIT server on a Linux box in about half an hour. It's really simple to do.
|
|
|
|
|
Forgive me, but if your concern is security how is it more secure running an internet facing server locally versus using github?
Do you really think your own unmonitored network is more secure than git's? Are you that confident in your server, your firewall and the software itself?
I don't mean to criticize, I just feel like I'm missing something.
Maybe you plan on using VPN?
Real programmers use butterflies
|
|
|
|
|
Maybe it is less likely a single individual computer/server might be less a target than something like github ?
I'd rather be phishing!
|
|
|
|
|
Maybe... before he announced it on the internet!
Now all the hackers are sitting here waiting for it to go live 
modified 23-Apr-21 12:29pm.
|
|
|
|
|
You're kidding maybe, but you raise an important point. The more people use it, the more people know about it, the more it gets out there, the higher your odds of being hacked.
Real programmers use butterflies
|
|
|
|
|
That's true, but it amounts to "security by obscurity", which is a thing precisely because it is Bad(TM)
Github is serious bait though, so I understand, it's just that localizing it doesn't necessarily make you more safe - in fact, it will be less safe if someone *does* hack it, because then they're on your network.
Playing the odds with someone not finding out almost universally underestimates malicious actors, who use crawlers, hacked DNS servers, and scanners (all usually distributed) and the like to find vulnerable targets. That's part of why I said security by obscurity is Bad(TM)
I'm not a security expert, but I *may* have had more experience with it because of my background than some people here, and so I'm offering this FWIW.
Anyone who has been in a network security role, by all means weigh in here.
Real programmers use butterflies
|
|
|
|
|
If it's connected to the internet via one of the 4 billion IPv4 addresses it's got a great big target on it, and is being constantly scanned by malware bots looking for known vulnerabilities that they can pwn.
Did you ever see history portrayed as an old man with a wise brow and pulseless heart, weighing all things in the balance of reason?
Is not rather the genius of history like an eternal, imploring maiden, full of fire, with a burning heart and flaming soul, humanly warm and humanly beautiful?
--Zachris Topelius
|
|
|
|
|
Three-four guys from work (counting me), max.
The reason I don't want to use GitHub is because they're a big target, and the code is somewhat sensitive in nature (not classified, but I don't necessarily want to have it stolen, either.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
It might be worthwhile to invest in something like - they used to call it a steelhead server? - something that can take incoming VPN connections. Expose your services through that, since it dramatically decreases your vulnerable surface area of your network. Basically to even get a port list you have to pass challenge response auth on a hardened system.
Real programmers use butterflies
|
|
|
|
|
|
Hmm... Gitea is new to me, thx ... 
|
|
|
|
|
I store all my source code at VisualStudio.com[^]. I've stuck with using TFS-VC because when I created my (free) account eons ago, Git wasn't an option. Today, you can choose to use Git instead of TFS-VC. I think this will meet your needs. You can also optionally allow others to collaborate on specific projects as long as they have a Microsoft identity.
/ravi
|
|
|
|
|
Just saw this meme / quote[^].
I instantly thought of the Lounge and can safely say: "Yes, yes I have" 
Anything that is unrelated to elephants is irrelephant
Anonymous
-
The problem with quotes on the internet is that you can never tell if they're genuine
Winston Churchill, 1944
-
Never argue with a fool. Onlookers may not be able to tell the difference.
Mark Twain
modified 23-Apr-21 5:17am.
|
|
|
|
|
|
I didn't get it at first because I've only seen a few examples of that meme. At first, I thought it was mawkish! 
|
|
|
|
|
. . . as romantic music plays in the background; slowly increasing in volume to a ecstatic crescendo.
Then, exhausted . . . spent . . . having shared Posts, they up-vote one another one last time and drift off asleep.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
You sir, are truly a poet.
(unlike me who can barely string two words together)
// TODO: Insert something here Top ten reasons why I'm lazy
1.
|
|
|
|
|
You just reminded me that I missed Sunshine Week this year!
Sunshine Week - Wikipedia[^]
Speaking of PITA people, I've often wondered if they know they are being a PITA? If they know, do they care? I swear, I know too many that seem to take pride in it, most notably the daily callers/texters. 
"Go forth into the source" - Neal Morse
"Hope is contagious"
|
|
|
|
|
And you just reminded me of It's a Sunshine Day: The Brady Bunch[^]. Unfortunately, I'm old enough to remember this.
"the debugger doesn't tell me anything because this code compiles just fine" - random QA comment
"Facebook is where you tell lies to your friends. Twitter is where you tell the truth to strangers." - chriselst
"I don't drink any more... then again, I don't drink any less." - Mike Mullikins uncle
|
|
|
|
|
Can heartless home work defeat this game (5,5)
Can
heartless home work = dy ( diy )
defeat = crush
game = Candy Crush
I'm amazed nobody solved this.
"I didn't mention the bats - he'd see them soon enough" - Hunter S Thompson - RIP
modified 24-Apr-21 3:25am.
|
|
|
|
|
OK, we surrender!
What did I miss?
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
I surrender too. Too many ways to parse it, especially given that some of it must be indirect.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
