RKlophaus
Joined 18 years ago
Karma
1,218
Submissions
135
Member since
Jul 17
http://rusty.io
View on Hacker NewsRecent submissions
Comment · 9 years ago
For anyone interested in alternatives, we built a utility (creatively named git-gpg) with the same goal: end-to-end encrypted git. It works over ssh, is self-hosted, and requires no additional software on the shared server.
Comment · 9 years ago
Rusty the organizer here. I'm trying to reboot the Hacker News DC meetup after a very long hiatus caused by startups and child-rearing.
All are welcome, hope you can make it. Looking forward to a great event!
Comment · 11 years ago
Right.
Comment · 11 years ago
For anyone interested, I solved this problem for my own needs using what I think is a unique approach, available here:
https://github.com/rustyio/git-gpg
As the name suggests, it uses gpg to encrypt and decrypt the data.
Unlike git-encrypt and git-crypt, it doesn't use smudge/clean filters.
Instead, it uses a special command (`git-gpg push $remote`) to push changes to a local unencrypted mirror of the remote repository. It then encrypts any newly created git objects, and finally rsyncs the new objects to the remote repository. So the remote is just a directory of zipped, gpg-encrypted files.
It has worked well for me over the past two years, but I don't expect that it solves every edge case.
Feedback welcomed through issues and pull requests.