Centos7/Centos8安装及配置SVN服务器(附配置文件)

1. 安装
   CentOS7通过yum安装subversion。

yum install subversion

CentOS8还可以dnf安装，同yum安装一样

dnf install subversion

subversion安装在/bin目录：

which svnserve #查看目录命令/usr/bin/svnserve

检查一下subversion是否安装成功。不要使用1.8版本

svnserve --version
svnserve, version 1.7.14 (r1542130)

2. 建立版本库
   subversion默认以/var/svn作为数据根目录，可以通过/etc/sysconfig/svnserve修改这个默认位置。

vim /etc/sysconfig/svnserve

文件内容
OPTIONS="-r /var/svn"
可修改

使用svnadmin建立版本库doc。

mkdir -p /var/svn/doc //递归创建多个目录
svnadmin create /var/svn/doc

ll /var/svn/doc //查看目录中内容

drwxr-xr-x. 2 root root 51 Nov 10 14:42 conf
drwxr-sr-x. 6 root root 4096 Nov 10 14:42 db
-r–r--r–. 1 root root 2 Nov 10 14:42 format
drwxr-xr-x. 2 root root 4096 Nov 10 14:42 hooks
drwxr-xr-x. 2 root root 39 Nov 10 14:42 locks
-rw-r–r--. 1 root root 229 Nov 10 14:42 README.txt

3. 配置

cd /var/svn/doc

a、编辑用户文件passwd，新增两个用户：admin和guest。

vim conf/passwd

[users]
admin = admin
guest = guest
b、编辑权限文件authz，用户admin设置可读写权限，guest设置只读权限。

vim conf/authz

[/]
admin = rw
guest = r
c、编辑svnserve.conf：

vim conf/svnserve.conf

[general]
anon-access = none #控制非鉴权用户访问版本库的权限
auth-access = write #控制鉴权用户访问版本库的权限
password-db = passwd #指定用户名口令文件名
authz-db = authz #指定权限配置文件名
//realm = svntest #指定版本库的认证域，即在登录时提示的认证域名称 //测试不需要
4. SVN服务
启动SVN服务。

systemctl start svnserve.service

检查服务是否启动成功。

ps aux | grep svn

root 16349 0.0 0.1 162180 900 ? Ss 15:01 0:00 /usr/bin/svnserve --daemon --pid-file=/run/svnserve/svnserve.pid -r /opt/svn
通过netstat可以看到SVN打开了3690端口。

netstat -tnlp

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:3690 0.0.0.0:* LISTEN 16349/svnserve
设置成开机启动。

systemctl enable svnserve.service

启动svn

svnserve -d -r /var/svn/doc

#查询svn启动情况

ps -ef|grep svn

#查询svn配置

egrep "\-access|\-db =" svnserve.conf

5. 更改防火墙设置
   大坑，注意阿里云\华为云\腾讯云都要要开相应端口3690的安全组

firewall-cmd --add-port=3690/tcp --permanent
firewall-cmd --reload  //重新启动防火墙

以下为配置示例

authz

[aliases]
# joe = /C=XZ/ST=Dessert/L=Snake City/O=Snake Oil, Ltd./OU=Research Institute/CN=Joe Average

[groups]
# harry_and_sally = harry,sally
# harry_sally_and_joe = harry,sally,&joe
# 创建了一个admin组和一个user组，方便管理
admin=lzyats
user=zsf
# [/foo/bar]
# harry = rw
# &joe = r
# * =

# [repository:/baz/fuz]
# @harry_and_sally = rw
# * = r
# 指定组权限
[/]
@admin=rw
[zsf:/]
@user=rw
#[zsf:/]
#zsf=rw

passwd

### This file is an example password file for svnserve.
### Its format is similar to that of svnserve.conf. As shown in the
### example below it contains one section labelled [users].
### The name and password for each user follow, one account per line.

[users]
# harry = harryssecret
# sally = sallyssecret

lzyats=123456
zsf=123456

svnserve.conf

### This file controls the configuration of the svnserve daemon, if you
### use it to allow access to this repository.  (If you only allow
### access through http: and/or file: URLs, then this file is
### irrelevant.)

### Visit http://subversion.apache.org/ for more information.

[general]
### The anon-access and auth-access options control access to the
### repository for unauthenticated (a.k.a. anonymous) users and
### authenticated users, respectively.
### Valid values are "write", "read", and "none".
### Setting the value to "none" prohibits both reading and writing;
### "read" allows read-only access, and "write" allows complete 
### read/write access to the repository.
### The sample settings below are the defaults and specify that anonymous
### users have read-only access to the repository, while authenticated
### users have read and write access to the repository.
### 禁止匿名访问，
anon-access = none
### 对授权用户，允许用户有写权限
auth-access = write
### The password-db option controls the location of the password
### database file.  Unless you specify a path starting with a /,
### the file's location is relative to the directory containing
### this configuration file.
### If SASL is enabled (see below), this file will NOT be used.
### Uncomment the line below to use the default password file.
### 户名和密码明文存放
password-db = passwd
### The authz-db option controls the location of the authorization
### rules for path-based access control.  Unless you specify a path
### starting with a /, the file's location is relative to the
### directory containing this file.  The specified path may be a
### repository relative URL (^/) or an absolute file:// URL to a text
### file in a Subversion repository.  If you don't specify an authz-db,
### no path-based access control is done.
### Uncomment the line below to use the default authorization file.
### 用户密码使用了sasl加密
authz-db = authz
### The groups-db option controls the location of the file with the
### group definitions and allows maintaining groups separately from the
### authorization rules.  The groups-db file is of the same format as the
### authz-db file and should contain a single [groups] section with the
### group definitions.  If the option is enabled, the authz-db file cannot
### contain a [groups] section.  Unless you specify a path starting with
### a /, the file's location is relative to the directory containing this
### file.  The specified path may be a repository relative URL (^/) or an
### absolute file:// URL to a text file in a Subversion repository.
### This option is not being used by default.
#groups-db = groups
### This option specifies the authentication realm of the repository.
### If two repositories have the same authentication realm, they should
### have the same password database, and vice versa.  The default realm
### is repository's uuid.
### 指定授权所属的域，可以理解为命名空间
# realm = My First Repository
### The force-username-case option causes svnserve to case-normalize
### usernames before comparing them against the authorization rules in the
### authz-db file configured above.  Valid values are "upper" (to upper-
### case the usernames), "lower" (to lowercase the usernames), and
### "none" (to compare usernames as-is without case conversion, which
### is the default behavior).
# force-username-case = none
### The hooks-env options specifies a path to the hook script environment 
### configuration file. This option overrides the per-repository default
### and can be used to configure the hook script environment for multiple 
### repositories in a single file, if an absolute path is specified.
### Unless you specify an absolute path, the file's location is relative
### to the directory containing this file.
# hooks-env = hooks-env

[sasl]
### 用于标识是否进行SASL加密处理
### This option specifies whether you want to use the Cyrus SASL
### library for authentication. Default is false.
### Enabling this option requires svnserve to have been built with Cyrus
### SASL support; to check, run 'svnserve --version' and look for a line
### reading 'Cyrus SASL authentication is available.'
#use-sasl = true
### These options specify the desired strength of the security layer
### that you want SASL to provide. 0 means no encryption, 1 means
### integrity-checking only, values larger than 1 are correlated
### to the effective key length for encryption (e.g. 128 means 128-bit
### encryption). The values below are the defaults.
# min-encryption = 0
# max-encryption = 256