vole

Clone

Read only, no credentials:

https://rodent.software/git/vole.git

Write over SSH with a registered key:

git clone ssh://git@0.0.0.0:2222/vole.git

A free and open-source forge that lives in your Git repo.

Phase 7 slice 2: a release is a tag the web can read

c56911e2c3ede0f70c7cde560042806dbf4b4ab0 · Keenan Nemetz · 17d ago · parent f76c635b

Phase 7 slice 2: a release is a tag the web can read

A release is an annotated tag, so nothing new is stored: the tag message is the
notes, the tree is the tarball, and both are already in every clone.

- internal/gitx/tags.go lists refs/tags peeled to their commits and tells an
  annotated tag from a lightweight one; a lightweight tag's %(contents) is the
  commit message, so reading it as notes would invent a release description
  nobody wrote
- internal/gitx/archive.go streams `git archive`; tarballs are generated per
  request and never stored, so they cannot disagree with the tag
- internal/web/releases.go renders the list (lightweight tags labelled), the
  release page (notes through the same sanitiser as every pushed body, commits
  since the previous release, two downloads) and the archive handlers: ETag is
  the tag object id plus the format, conditional requests get 304, always
  Content-Disposition: attachment with nosniff, compressed streams queue behind
  a semaphore of 4 while plain tar does not
- "since the previous release" is `git describe --abbrev=0 <tag>^`, not the next
  row of the tag list: two tags made in the same second sort arbitrarily, and a
  page that changes its baseline between requests is worse than one without one
- the page warns when the tagged tree tracks LFS, because git archive copies
  pointer files verbatim (measured in spike D)
- cmd/vole release create writes the annotated tag and refuses an empty message
  or an existing name: re-tagging is how a download link comes to mean different
  bytes

Measured end to end against the binary with an 11.6 MiB, 2,566-file repository:
release list 6.1 ms, release page 12.6 ms, .tar 53.7 ms / 13.7 MiB, .tar.gz
218 ms / 1.8 MiB, conditional request 304. Every file in the served tarball
hashed to its ls-tree blob id (2,565 of 2,565).

internal/server/server.go +6

@@ -146,6 +146,12 @@ func (s Server) routes() http.ServeMux {
	146	146	mux.HandleFunc("GET /r/{name}/issues/{id}", w.IssueView)
	147	147	mux.HandleFunc("GET /r/{name}/requests", w.Requests)
	148	148	mux.HandleFunc("GET /r/{name}/requests/{id}", w.RequestView)
		149	// A tag may contain "/", so the detail route takes the rest of the path; the
		150	// two archive routes are more specific and win for their suffixes.
		151	mux.HandleFunc("GET /r/{name}/releases", w.Releases)
		152	mux.HandleFunc("GET /r/{name}/releases/{tag...}", w.ReleaseView)
		153	mux.HandleFunc("GET /r/{name}/releases/{tag}/archive.tar", w.ReleaseTar)
		154	mux.HandleFunc("GET /r/{name}/releases/{tag}/archive.tar.gz", w.ReleaseTarGz)
	149	155	mux.HandleFunc("GET /r/{name}/runs/{id}/log", w.RunLog)
	150	156
	151	157	mux.HandleFunc("GET /healthz", func(rw http.ResponseWriter, r *http.Request) {