SVN server on shared hosting

you'll need SSH access for this, so pick your hosting wisely!

i've set up mine on HostMonster

in the code samples, things to customize to your liking are ~/some/temp, mysvn_id_rsa, mysvn, user, my.host.com, /home/user and repo

prepare SVN

on your hosting server, download the latest version of SVN (this was 1.6.17, as of writing), and build and install it

cd ~/some/temp
wget http://subversion.tigris.org/downloads/subversion-1.6.17.tar.gz
wget http://subversion.tigris.org/downloads/subversion-deps-1.6.17.tar.gz
tar xfz subversion-1.6.17.tar.gz
tar xfz subversion-deps-1.6.17.tar.gz
cd subversion-1.6.17/
./configure --prefix=$HOME --without-berkeley-db --with-editor=/usr/bin/vim --with-neon=$HOME --without-apxs --without-apache --without-neon
make && make install

at this point, you may delete all files in ~/some/temp, you're done with the SVN build

the SVN binaries are now located in the ~/bin folder. this folder is typically already included in $PATH; you can verify it by running

svn --version

create the SSH keys

for ease of use, and security at the same time, you should use SSH keys for authentication

the easiest way is to use passphrase-less keys, that you'll use only for the SVN access

on your development machine:

# create the keys - choose where to put the keys, and enter empty passphrase;
# name the keys something like mysvn_id_rsa, so you can easily recognize them
# be sure to chmod 600 both keys afterwards; SSH even refuses to work with non-600 keys!

ssh-keygen -t rsa

# now transfer - e.g. by scp - the mysvn_id_rsa.pub (and only this key -
# not the private one!) to your hosting account and register it as a valid key:

scp mysvn_id_rsa.pub [email protected]:~
ssh [email protected]
cat mysvn_id_rsa.pub >> ~/.ssh/authorized_keys
exit

setting up SVN on the local machine

on your local machine, put the keys somewhere safe - typically in the ~/.ssh folder - and make sure the folder is chmod'ed to 700

SVN lets you define named tunnels to use, with any protocol you want

edit your ~/.subversion/config file, adding the following line under the [tunnels] section:

mysvn = ssh -i /home/user/.ssh/mysvn_id_rsa

notice that you have to use a full path to the key, otherwise you'll get the following error:

Warning: Identity file ~/.ssh/mysvn_id_rsa not accessible: No such file or directory.

setting up the server side

due to security concerns, SSH does not see the user's $PATH until the user is logged in. this means that the svnserve command won't work via SSH, as your svnserve executable is in your home. if you try to check out the repository now, you'll get the following error:

bash: svnserve: command not found

it's simple to overcome (and the reason why the created key should/can be used only for SVN connections) by updating the ~/.ssh/authorized_keys file on your server, adding the following to the start of the line where your public key is:

command="/home/user/bin/svnserve -t -r /home/user/svn/"

where /home/user/svn/ is the folder where you want to store your repositories. you can also find the path to svnserve using `which svnserve`

here you can see that "the only thing" that can be done with the key is to run the svnserve command

using it all

now, once you create some repositories on the server, or move them from previous hosting, you can check out - on your local machine - the /home/user/svn/repo like this:

svn co svn+mysvn://my.host.com/repo

note the mysvn named tunnel from the SVN config file; this way, on a single development machine, you can use as many different SSH keys and setups as you need

also note what the -r parameter did - it specifies SVN's fake root on the server, i.e. the starting point from which svnserve should start looking for the repositories - for the given key - you can change this on the per-key level. this has two advantages:

• makes your setup more secure - svnserve cannot access files outside this folder

• makes your repository easier to use - in the above URL, the repo part translates to /home/user/svn/repo; without the -r parameter to svnserve, you'd have to use the full path:

  svn co svn+mysvn://my.host.com/home/user/svn/repo