Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Encrypted Git hosting should be easy

github.com

Post reply on HN
Print view View original

21–30 of 71 posts

Re: Show HN: Encrypted Git hosting should be easy

#21

Post by wanderingmind »

nathants wrote: post #14
wanderingmind wrote: post #13

Great work. Is it possible to reconfigure this to use existing tools like rclone which can save encrypted files across multiple remotes. Thus way J can use my Google Drive or Dropbox to store instead of needing to use s3.

git-remote-gcrypt supports rclone, and all of it's backends. i would use that for your use case. this takes an explicit dependency on aws, though all that is needed is: - (large) object storage with read-after-write consistency (s3) - (small) object storage with compare-and-swap (dynamodb) it would be easy to port this to any provider that provides these two kinds of object storage. compare-and-swap means that multip…

Oops missed it, in which case will definitely give it a shot.

Re: Show HN: Encrypted Git hosting should be easy

#22

Post by nathants »

donatj wrote: post #17
nathants wrote: post #12

Earlier quoted context omitted.

git with ssh on a server is fantastic, though sometimes managing and paying for the server can be annoying. afaik it's not possible to have an untrusted git server, at a minimum ram contents will be plaintext. before i undertook this, i had never heard of git-bundle: https://git-scm.com/docs/git-bundle

> at a minimum ram contents will be plaintext The only thing that's going to remain resident after a push/pull is os level file system cache. There's no daemon when operating git over ssh. Are container escapes on major hosting services common enough to even worry about? I don't hear much about them. Or are you concerned about AWS/Vultr/Digital Ocean stealing your code? That seems like paranoia. They have world class…

yes, the concern is aws employees reading my private poetry collection. my rights!

Re: Show HN: Encrypted Git hosting should be easy

#25

Post by bcjordan »

nathants wrote: post #14
wanderingmind wrote: post #13

Great work. Is it possible to reconfigure this to use existing tools like rclone which can save encrypted files across multiple remotes. Thus way J can use my Google Drive or Dropbox to store instead of needing to use s3.

git-remote-gcrypt supports rclone, and all of it's backends. i would use that for your use case. this takes an explicit dependency on aws, though all that is needed is: - (large) object storage with read-after-write consistency (s3) - (small) object storage with compare-and-swap (dynamodb) it would be easy to port this to any provider that provides these two kinds of object storage. compare-and-swap means that multip…

Something about the idea of being able to back things up on multiple remote target storage services sounds extra compelling. Simple encryption with robust backup for e.g. text notes.

Re: Show HN: Encrypted Git hosting should be easy

#26

Post by nathants »

bcjordan wrote: post #24

I like it, a nice simple approach! Fun reading through the code, heres the bit that does the encryption (I think): https://github.com/nathants/git-remote-aws/blob/c8012c5a6b80...

that it. in libsodium we trust. the key goes in a cryptobox to each recipient, followed by a secretstream of the data.

Re: Show HN: Encrypted Git hosting should be easy

#27

Post by eftychis »

nathants wrote: post #8
celdon25 wrote: post #4

Earlier quoted context omitted.

> This only protects you against a malicious/compromised hosting provider In the increasingly large set of countries without absolute freedoms, such a thing is a given for any hosting provider.

even when you can trust your provider, and often you can, not trusting them can be psychologically beneficial.

I mean, you need to be a bit realistic, and not kid yourself about who has access.

Re: Show HN: Encrypted Git hosting should be easy

#28

Post by nathants »

hsn915 wrote: post #23

Why S3? I don't have an aws account and don't ever plan on having one. If you want to make git hosting easy, make a self-contained executable that requires nothing but a bare unix-like environment.

s3 is sota, but there are others. just run git on a server! not one executable, but you can pretend.

Re: Show HN: Encrypted Git hosting should be easy

#30

Post by nathants »

zadokshi wrote: post #29

CIA has entered the chat ... > Amazon is a world class superior provider, you should definitely trust them. CCP has entered the chat ... > git not need the end to end encryption. Especially if you build website in xingjian.

both novels sound like a good read.
Post reply on HN