Set up Subversion with SSH (svn+ssh)

[[[TOC]]]
=Setup SVN Server=

1. Install Subversion
• Red Hat/CentOS/Fedora

{{{ lang=bash
sudo yum install subversion
}}}

• Debian Based (Ubuntu)

{{{ lang=bash
sudo apt-get install subversion
}}}

2. Create a repository

{{{ lang=bash
sudo mkdir /data01/svn
sudo mkdir /data01/svn/repos
sudo svnadmin create /data01/svn/repos/new_repo
}}}

3. Create an SVN group (add whichever users you would like to it)

{{{ lang=bash
sudo groupadd svn
sudo usermod -a -G svn svn_user
}}}

4. Create svn user as part of the svn group.

{{{ lang=bash
sudo useradd -g svn svn
}}}

5. Give the new group ownership of the repos directory and set the permissions.

{{{ lang=bash
sudo chown -R svn:svn /data01/svn
sudo chmod -R 775 /data01/svn
}}}

6. Create a wrapper for [[http://svnbook.red-bean.com/en/1.7/svn.ref.svnserve.html|svnserve]] at `/data01/svn/svnserve.sh`.

{{{ lang=bash
#!/bin/sh
# set the umask so that files are group writable
umask 002
# call svnserve, passing the default repo location
exec /usr/bin/svnserve “$@” -r /data01/svn/repos
}}}

7. Symlink to `/usr/local/bin`. Set permissions appropriately.

{{{ lang=bash
cd /usr/local/bin/
sudo ln -s /data01/svn/svnserve.sh svnserve
sudo chmod 755 /data01/svn/svnserve.sh
}}}

=Setup Key-Based Authentication=

1. Create public/private key pair using ssh-keygen on local machine.

{{{ lang=bash
svn@cwch3wnsapvl001:/home/svn$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/data01/home/svn/.ssh/id_rsa):
Created directory ‘/data01/home/svn/.ssh’.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /data01/home/svn/.ssh/id_rsa.
Your public key has been saved in /data01/home/svn/.ssh/id_rsa.pub.
The key fingerprint is:
20:bc:01:62:a9:60:e6:0e:5a:3c:dc:12:d7:44:5e:f7 svn@ch3wnsapvl001.domain.com
}}}

2. Copy the public key to remote host with ssh-copy-id

{{{ lang=bash
ssh-copy-id -i ~/.ssh/id_rsa.pub user@remote-host
}}}

3. Test login from remote-host. Verify that it is now passwordless

{{{ lang=bash
user@localhost:~$ ssh svn@wins.clearwire.com
svn@cwch3wnsapvl001:~$
}}}