| commit | c7d6d8ea5cce439e5aee894673eb5ad74b882034 | [log] [tgz] |
|---|---|---|
| author | Dave Borowitz <dborowitz@google.com> | Mon Sep 14 16:38:24 2015 -0400 |
| committer | Dave Borowitz <dborowitz@google.com> | Fri Oct 09 10:04:18 2015 -0400 |
| tree | 837c5a20c6ecb50577ef1f8583711af86ac8e949 | |
| parent | 47a462d1aa39ffd562f606ffb42b87388a5a6c74 [diff] |
Allow magic branch pushes with certs from untrusted keys The traditional way to establish that a GPG key offered by a user actually belongs to that user in real life is to do some sort of offline identity verification (checking paper ID, etc.). If a site requires that level of verification for _any_ push, that may be an unreasonably high bar for someone to meet before their first contribution to a project. (But some organizations may still want it, so it may be worth controlling with an option in the future.) Allow untrusted keys if such a user is only pushing code for review, i.e. to a magic branch name like refs/for/*. We now store the push certificate itself in any PatchSets that are created, so it can be verified later and/or exposed in the UI. Change-Id: I0b1e2a13a6228b2ca00a391f005d9baddf08817f
Gerrit is a code review and project management tool for Git based projects.
Gerrit makes reviews easier by showing changes in a side-by-side display, and allowing inline comments to be added by any reviewer.
Gerrit simplifies Git based project maintainership by permitting any authorized user to submit changes to the master Git repository, rather than requiring all approved changes to be merged in by hand by the project maintainer.
For information about how to install and use Gerrit, refer to the documentation.
Our canonical Git repository is located on googlesource.com. There is a mirror of the repository on Github.
Please report bugs on the issue tracker.
Gerrit is the work of hundreds of contributors. We appreciate your help!
Please read the contribution guidelines.
Note that we do not accept Pull Requests via the Github mirror.
The IRC channel on freenode is #gerrit. An archive is available at: echelog.com.
The Developer Mailing list is repo-discuss on Google Groups.
Gerrit is provided under the Apache License 2.0.
Install Buck and run the following:
git clone --recursive https://gerrit.googlesource.com/gerrit
cd gerrit && buck build all
The instruction how to configure GerritForge/BinTray repositories is here
On Debian/Ubuntu run:
apt-get update & apt-get install gerrit=<version>-<release>
NOTE: release is a counter that starts with 1 and indicates the number of packages that have been released with the same version of the software.
On CentOS/RedHat run:
yum clean all && yum install gerrit-<version>[-<release>]
NOTE: release is optional. Last released package of the version is installed if the release number is omitted.