Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Encrypted Git hosting should be easy

github.com

Post reply on HN
Print view View original

51–60 of 71 posts

Re: Show HN: Encrypted Git hosting should be easy

#51

Post by KronisLV »

hsn915 wrote: post #23

Why S3? I don't have an aws account and don't ever plan on having one. If you want to make git hosting easy, make a self-contained executable that requires nothing but a bare unix-like environment.

Well, technically with a bit of work you can use anything self-hosted that is S3 compatible.

Personally, I rather like:

  - https://www.zenko.io/
  - https://min.io/
Even if I don't really buy into AWS too much (apart from enterprise stuff), it's good that they went ahead and created a standard for blob storage that other implementations could also benefit from, due to the compatibility with various libraries etc.

Of course, there's also reliance on DynamoDB for this project, though that could also probably be swapped out for something else.

Re: Show HN: Encrypted Git hosting should be easy

#52

Post by nathants »

kreetx wrote: post #49
sgloutnikov wrote: post #40

The Keybase encrypted Git is just fine [0]. While Keybase still exists at least. Still sad about that one :( [0] https://book.keybase.io/git

I also use it and although I'm very thankful for the service given that it's free, then I wish it would be faster (push/pull takes 10+ seconds).

dang. 10 second push/pull is not acceptable.

Re: Show HN: Encrypted Git hosting should be easy

#53

Post by MayeulC »

ReactiveJelly wrote: post #31
donatj wrote: post #11

This is too dang complicated. For years, across two different jobs we just had bare repos on Linux servers - we used git's built in ssh support and we liked it. Worked great. We wanted a Pull Request workflow and moved to GitHub, but self hosted is fine. All you really need is a server your developers can SSH into with a shared directory. $2 a month Vultr server and you're golden. You want to get real spicy, you can…

SSH is a lot of privilege for a coworker to have. You could get by with HTTP GETs and `update-server-info`

I usually use the followig when developing with multiple people without an Internet connection:

https://stackoverflow.com/a/377293

   git daemon --reuseaddr --base-path=. --export-all --verbose
Others can just pull from the IP address. Works well for hacking in the field, a PR is just one shout away :)

Re: Show HN: Encrypted Git hosting should be easy

#54

Post by minitech »

donatj wrote: post #11

This is too dang complicated. For years, across two different jobs we just had bare repos on Linux servers - we used git's built in ssh support and we liked it. Worked great. We wanted a Pull Request workflow and moved to GitHub, but self hosted is fine. All you really need is a server your developers can SSH into with a shared directory. $2 a month Vultr server and you're golden. You want to get real spicy, you can…

> All you really need is a server your developers can SSH into with a shared directory. $2 a month Vultr server and you're golden.

which addresses exactly none of what this project is intended to, since there’s no end-to-end encryption. (yes, if you don’t need end-to-end encryption on your git repo, this is too complicated for your use case.)

Re: Show HN: Encrypted Git hosting should be easy

#55

Post by krageon »

celdon25 wrote: post #4
arkadiyt wrote: post #2

What's the threat model here? Anyone who needs to interact with the source code needs access to the plaintext version (employees, contractors, CodeClimate/CircleCI/Atlassian/Slack/etc type vendors, etc, all retain access), and people who don't need to interact with the source code should have their access removed in the first place. This only protects you against a malicious/compromised hosting provider, but usually…

> This only protects you against a malicious/compromised hosting provider In the increasingly large set of countries without absolute freedoms, such a thing is a given for any hosting provider.

> without absolute freedoms

No current country has absolute freedoms, except as a fantasy.

Re: Show HN: Encrypted Git hosting should be easy

#56

Post by webmobdev »

arkadiyt wrote: post #2

What's the threat model here? Anyone who needs to interact with the source code needs access to the plaintext version (employees, contractors, CodeClimate/CircleCI/Atlassian/Slack/etc type vendors, etc, all retain access), and people who don't need to interact with the source code should have their access removed in the first place. This only protects you against a malicious/compromised hosting provider, but usually…

I haven't looked at the project being discussed, but assuming it stores your code encrypted in some hosted git, one usecase I can think of is to protect the code from the hosting platform. For e.g. Microsoft ToS for Github allows it to scan / read your code for various kinds of analysis, which some may not want given their history of abuse. Encrypted git can prevent such things. And ofcourse, if one of the BigTech is going to be your competitor it makes to store your data encrypted on their platforms.

Re: Show HN: Encrypted Git hosting should be easy

#57

Post by celdon25 »

krageon wrote: post #55
celdon25 wrote: post #4

Earlier quoted context omitted.

> This only protects you against a malicious/compromised hosting provider In the increasingly large set of countries without absolute freedoms, such a thing is a given for any hosting provider.

> without absolute freedoms No current country has absolute freedoms, except as a fantasy.

The people who don’t know this (i.e. target audience) will think otherwise. Correcting others that are making a point can be counterproductive. To reach those under the spell of fantasy, speak the language of fantasy.

Re: Show HN: Encrypted Git hosting should be easy

#58

Post by [deleted] »

donatj wrote: post #11

This is too dang complicated. For years, across two different jobs we just had bare repos on Linux servers - we used git's built in ssh support and we liked it. Worked great. We wanted a Pull Request workflow and moved to GitHub, but self hosted is fine. All you really need is a server your developers can SSH into with a shared directory. $2 a month Vultr server and you're golden. You want to get real spicy, you can…

[deleted]

Re: Show HN: Encrypted Git hosting should be easy

#59

Post by kzrdude »

krageon wrote: post #55
celdon25 wrote: post #4

Earlier quoted context omitted.

> This only protects you against a malicious/compromised hosting provider In the increasingly large set of countries without absolute freedoms, such a thing is a given for any hosting provider.

> without absolute freedoms No current country has absolute freedoms, except as a fantasy.

Every country requires pragmaticism, in some cases encrypted storage is a good thing

Re: Show HN: Encrypted Git hosting should be easy

#60

Post by krageon »

celdon25 wrote: post #57
krageon wrote: post #55

Earlier quoted context omitted.

> without absolute freedoms No current country has absolute freedoms, except as a fantasy.

The people who don’t know this (i.e. target audience) will think otherwise. Correcting others that are making a point can be counterproductive. To reach those under the spell of fantasy, speak the language of fantasy.

Perhaps you can give me an example of "speak the language of fantasy". While I can see your point, I can't really see how to put it into practice.

Edit: I didn't realise you were the person I responded to. I see what you mean, but I still think it's an important thing to discuss. It just won't be relevant to those people, which I can live with.

Post reply on HN