One of the things on my longer-term todo list has been to get our
canonical git repos out of bitbucket and on to something running free
software (preferably something that we or infra controls). Now that
we're getting closer to migrating off of our current phabricator
instance, I think it's time to consider making this move for at least
the repos that are currently hosted on bitbucket.
As I see it, we have two obvious choices: using phabricator or using
pagure [1]. They both have advantages and disadvantages (that I've
listed at the end of this email) but both are 100% open source and
hosted by Fedora infra.
Thoughts?
Tim
[1]
https://pagure.io/
Hosting git repos in phabricator
--------------------------------
Phabricator has been capable of hosting git repos for a while now, the
holdup has been me getting everything ready to migrate on to a new
setup that's capable of doing it
* we have more control over the repo hosting
* we have more responsibility for making sure things stay up, are
recovered in the event of a system failure etc.
* would likely be easier to use some of phab's automation features if
it controls the repos
* ACLs for repos would be controlled in one place
* would require users to upload ssh keys - I don't think we can (not
even sure about should, if it's possible) get ssh pubkey data from
fas @ account creation time
* any extra load from clients cloning task repos would be on our infra
and not causing issues for others
A note that could be worth making is the permissions/policy structure
on phabricator. It can be configured to allow users to create repos but
in order to make that work well enough to justify doing, we'd need to
allow all users to edit all repos as well - I don't see a more
granular way of making this happen ATM. It's not something that isn't
fixable long term if we're not happy with the "request repo for XXX
from admins" process but figured I would mention it.
pagure
------
pagure is a project started in infra. pingou is the main dev and it's
gained quite a few new features lately. Despite the non-fp.o domain, it
is infra hosted.
* We don't have to worry about hosting our own repos
* doing similar things to other groups - I don't think there's any
interest by any other fedora groups in using phabricator unless
something goes horribly wrong with pagure (I also suspect the odds
of that happening are pretty low).
* would require users to upload ssh keys but that's once for all the
things that are (and eventually will be) hosted in pagure
* we'd have to figure out how to handle the eventual pull requests
that are out of process for us - the same thing kinda exists with
bitbucket but I suspect it'll get more common as things progress.