linux下的Gerrit2的安装和配置

$ createuser --username=postgres -RDIElPS gerrit2
$ createdb --username=postgres -E UTF-8 -O gerrit2 reviewdb

这里使用PostgreSQL提供的shell工具,也可以登录PostgreSQL使用psql来CREATE ROLE和CREATE DATABASE。

# sudo su - gerrit2
# java -jar gerrit-2.8.1.war init -d review

进入交互式安装,具体的安装配置如下:

# ln -sf /home/gerrit2/review/bin/gerrit.sh /etc/init.d/gerrit
# ln -sf /etc/init.d/gerrit /etc/rc3.d/S90gerrit

nginx配置

server { 
        listen 80;
        server_name review.domain.tld;
        location / {
                auth_basic              "Gerrit2 Code Review";
                auth_basic_user_file    /home/gerrit2/htpasswd.conf;
                proxy_pass              http://127.0.0.1:8081;
                proxy_set_header        X-Forwarded-For $remote_addr;
                proxy_set_header        Host $host;
        }
        location /login/ {
                proxy_pass              http://127.0.0.1:8081;
                proxy_set_header        X-Forwarded-For $remote_addr;
                proxy_set_header        Host $host;
        }
}

# ssh review gerrit set-account --add-email username@openwares.net username

这是review是.ssh/config中配置的远程ssh主机别名。

Host review
    Hostname    review.domain.tld
    User        admin
    Port        29418
    #如果私钥名字为id_rsa,可以省略下面一行
    IdentityFile    ~/.ssh/id_rsa.gerrit

这样ssh访问gerrit就可以了:

# ssh review
****    Welcome to Gerrit Code Review    ****
  Hi username, you have successfully connected over SSH.
  Unfortunately, interactive shells are disabled.
  To clone a hosted Git repository, use:
  git clone ssh://admin@review.domain.tld:29418/REPOSITORY_NAME.git
Connection to review.tafdc.org closed.

查看gerrit shell帮助

# ssh review gerrit --help
gerrit [COMMAND] [ARG ...] [--] [--help (-h)]
 --          : end of options
 --help (-h) : display this help text
Available commands of gerrit are:
   ban-commit           Ban a commit from a project's repository
   create-account       Create a new batch/role account
   create-group         Create a new account group
   create-project       Create a new project and associated Git repository
   flush-caches         Flush some/all server caches from memory
   gc                   Run Git garbage collection
   gsql                 Administrative interface to active database
   ls-groups            List groups visible to the caller
   ls-members           Lists the members of a given group
   ls-projects          List projects visible to the caller
   ls-user-refs         List refs visible to a specific user
   plugin               
   query                Query the change database
   receive-pack         Standard Git server side command for client side git push
   rename-group         Rename an account group
   review               Verify, approve and/or submit one or more patch sets
   set-account          Change an account's settings
   set-members          Modifies members of specific group or number of groups
   set-project          Change a project's settings
   set-project-parent   Change the project permissions are inherited from
   set-reviewers        Add or remove reviewers on a change
   show-caches          Display current cache statistics
   show-connections     Display active client SSH connections
   show-queue           Display the background work queues, including replication
   stream-events        Monitor events occurring in real time
   test-submit          
   version              Display gerrit version
See 'gerrit COMMAND --help' for more information.

导入现存git代码库

#cp -r /path/to/old.git /path/to/gerrit/git/

或者稍微繁琐一些的方法：在gerrit中新建一个project,不要做init commit,然后将新建的仓库做为已经存在仓库的远程仓库,然后push就可以了。
可以设置gerrit该仓库不经过审核,就可以直接将整个仓库push过来了。

sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: 
unable to find valid certification path to requested target

因为自签的证书是不受信任的,最简单的解决办法就是告诉gerrit不要校验STMP服务的证书:

[sendmail]
    sslverify=false

或者更复杂的解决办法,将SMTP的SSL证书添加到JAVA的truststore里,参考[3]里有对此问题的详细描述。