init

argohandler/argohandler.go

@@ -0,0 +1,131 @@
+package argohandler
+
+import (
+	"context"
+	"fmt"
+	"log"
+	"sync"
+
+	"github.com/argoproj/argo-cd/v2/pkg/apiclient"
+	"github.com/argoproj/argo-cd/v2/pkg/apiclient/application"
+	argoprojv1alpha1 "github.com/argoproj/argo-cd/v2/pkg/apis/application/v1alpha1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
+type ApplicationValues struct {
+	Name      string `yaml:"name"`
+	Namespace string `yaml:"namespace"`
+	Path      string `yaml:"path"`
+	Cluster   string `yaml:"cluster"`
+	RepoURL   string `yaml:"repoURL"`
+	Server    string `yaml:"server"`
+}
+
+var (
+	client apiclient.Client
+	once   sync.Once
+	err    error
+)
+
+func InitializeClient() {
+	once.Do(func() {
+		argocdServer := "192.168.1.10:31946"
+		argocdToken := "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJhcmdvY2QiLCJzdWIiOiJhZG1pbjphcGlLZXkiLCJuYmYiOjE3Mzc5NzA4MTksImlhdCI6MTczNzk3MDgxOSwianRpIjoiYjgzODAxZDQtNWNjOC00NTNiLWE0NTYtNTBjNzZjODkyMzcwIn0.9QXrnVeeTnH18YXb9rE7UTWIk16O63a9O03au35SEwk"
+
+		config := apiclient.ClientOptions{
+			ServerAddr: argocdServer,
+			AuthToken:  argocdToken,
+			Insecure:   true,
+		}
+
+		// Initialize the ArgoCD client
+		client, err = apiclient.NewClient(&config)
+		if err != nil {
+			log.Fatalf("Failed to create ArgoCD client: %v", err)
+		}
+	})
+}
+
+func CreateApp() {
+
+	InitializeClient()
+
+	// Create an application client
+	_, appClient, err := client.NewApplicationClient()
+	if err != nil {
+		log.Fatalf("Failed to create application client: %v", err)
+	}
+
+	app := ApplicationValues{
+		Name:      "vc-bhrz-n",
+		Namespace: "vc-bhrz-n",
+		Path:      "vcluster-0.21.1",
+		Cluster:   "in-cluster",
+		Server:    "https://kubernetes.default.svc",
+		RepoURL:   "http://192.168.1.10:3000/admin/applications",
+	}
+
+	// Define the ArgoCD application
+	argoApp := &argoprojv1alpha1.Application{
+		ObjectMeta: metav1.ObjectMeta{
+			Name:      app.Name,
+			Namespace: "argocd",
+			Finalizers: []string{
+				"resources-finalizer.argocd.argoproj.io",
+			},
+		},
+		Spec: argoprojv1alpha1.ApplicationSpec{
+			Destination: argoprojv1alpha1.ApplicationDestination{
+				Namespace: app.Namespace,
+				Name:      app.Cluster,
+			},
+			Source: &argoprojv1alpha1.ApplicationSource{
+				Path:           app.Path,
+				RepoURL:        app.RepoURL,
+				TargetRevision: "HEAD",
+				Helm: &argoprojv1alpha1.ApplicationSourceHelm{
+					ValueFiles: []string{"vcluster.yaml"},
+				},
+			},
+			Project: "default",
+			SyncPolicy: &argoprojv1alpha1.SyncPolicy{
+				SyncOptions: []string{"CreateNamespace=true"},
+			},
+		},
+	}
+
+	// Create the application
+	createdApp, err := appClient.Create(context.Background(), &application.ApplicationCreateRequest{
+		Application: argoApp,
+	})
+	if err != nil {
+		log.Fatalf("Failed to create application: %v", err)
+	}
+
+	fmt.Printf("Application created: %s\n", createdApp.Name)
+
+	SyncApp(app.Name)
+}
+
+func SyncApp(appName string) {
+
+	InitializeClient()
+
+	// Create an application client
+	_, appClient, err := client.NewApplicationClient()
+	if err != nil {
+		log.Fatalf("Failed to create application client: %v", err)
+	}
+
+	// Synchronize the application
+	_, err = appClient.Sync(context.Background(), &application.ApplicationSyncRequest{
+		Name: &appName,
+	})
+
+	if err != nil {
+		log.Fatalf("Failed to sync application: %v", err)
+	}
+
+	fmt.Printf("Application synced successfully: %s\n", appName)
+
+}

data/git/.ssh/authorized_keys

@@ -0,0 +1,2 @@
+# gitea public key
+command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-1",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-rsa 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 behrooz@behrooz-ops

data/git/.ssh/environment

@@ -0,0 +1 @@
+GITEA_CUSTOM=/data/gitea

data/git/repositories/admin/applications.git/HEAD

@@ -0,0 +1 @@
+ref: refs/heads/main

data/git/repositories/admin/applications.git/config

@@ -0,0 +1,4 @@
+[core]
+	repositoryformatversion = 0
+	filemode = true
+	bare = true

data/git/repositories/admin/applications.git/description

@@ -0,0 +1 @@
+Unnamed repository; edit this file 'description' to name the repository.

data/git/repositories/admin/applications.git/hooks/applypatch-msg.sample

@@ -0,0 +1,15 @@
+#!/bin/sh
+#
+# An example hook script to check the commit log message taken by
+# applypatch from an e-mail message.
+#
+# The hook should exit with non-zero status after issuing an
+# appropriate message if it wants to stop the commit.  The hook is
+# allowed to edit the commit message file.
+#
+# To enable this hook, rename this file to "applypatch-msg".
+
+. git-sh-setup
+commitmsg="$(git rev-parse --git-path hooks/commit-msg)"
+test -x "$commitmsg" && exec "$commitmsg" ${1+"$@"}
+:

data/git/repositories/admin/applications.git/hooks/commit-msg.sample

@@ -0,0 +1,24 @@
+#!/bin/sh
+#
+# An example hook script to check the commit log message.
+# Called by "git commit" with one argument, the name of the file
+# that has the commit message.  The hook should exit with non-zero
+# status after issuing an appropriate message if it wants to stop the
+# commit.  The hook is allowed to edit the commit message file.
+#
+# To enable this hook, rename this file to "commit-msg".
+
+# Uncomment the below to add a Signed-off-by line to the message.
+# Doing this in a hook is a bad idea in general, but the prepare-commit-msg
+# hook is more suited to it.
+#
+# SOB=$(git var GIT_AUTHOR_IDENT | sed -n 's/^\(.*>\).*$/Signed-off-by: \1/p')
+# grep -qs "^$SOB" "$1" || echo "$SOB" >> "$1"
+
+# This example catches duplicate Signed-off-by lines.
+
+test "" = "$(grep '^Signed-off-by: ' "$1" |
+	 sort | uniq -c | sed -e '/^[ 	]*1[ 	]/d')" || {
+	echo >&2 Duplicate Signed-off-by lines.
+	exit 1
+}

data/git/repositories/admin/applications.git/hooks/post-receive

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# AUTO GENERATED BY GITEA, DO NOT MODIFY
+data=$(cat)
+exitcodes=""
+hookname=$(basename $0)
+GIT_DIR=${GIT_DIR:-$(dirname $0)/..}
+
+for hook in ${GIT_DIR}/hooks/${hookname}.d/*; do
+  test -x "${hook}" && test -f "${hook}" || continue
+  echo "${data}" | "${hook}"
+  exitcodes="${exitcodes} $?"
+done
+
+for i in ${exitcodes}; do
+  [ ${i} -eq 0 ] || exit ${i}
+done

data/git/repositories/admin/applications.git/hooks/post-receive.d/gitea

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+# AUTO GENERATED BY GITEA, DO NOT MODIFY
+/usr/local/bin/gitea hook --config=/data/gitea/conf/app.ini post-receive

data/git/repositories/admin/applications.git/hooks/post-update.sample

@@ -0,0 +1,8 @@
+#!/bin/sh
+#
+# An example hook script to prepare a packed repository for use over
+# dumb transports.
+#
+# To enable this hook, rename this file to "post-update".
+
+exec git update-server-info

data/git/repositories/admin/applications.git/hooks/pre-applypatch.sample

@@ -0,0 +1,14 @@
+#!/bin/sh
+#
+# An example hook script to verify what is about to be committed
+# by applypatch from an e-mail message.
+#
+# The hook should exit with non-zero status after issuing an
+# appropriate message if it wants to stop the commit.
+#
+# To enable this hook, rename this file to "pre-applypatch".
+
+. git-sh-setup
+precommit="$(git rev-parse --git-path hooks/pre-commit)"
+test -x "$precommit" && exec "$precommit" ${1+"$@"}
+:

data/git/repositories/admin/applications.git/hooks/pre-commit.sample

@@ -0,0 +1,49 @@
+#!/bin/sh
+#
+# An example hook script to verify what is about to be committed.
+# Called by "git commit" with no arguments.  The hook should
+# exit with non-zero status after issuing an appropriate message if
+# it wants to stop the commit.
+#
+# To enable this hook, rename this file to "pre-commit".
+
+if git rev-parse --verify HEAD >/dev/null 2>&1
+then
+	against=HEAD
+else
+	# Initial commit: diff against an empty tree object
+	against=$(git hash-object -t tree /dev/null)
+fi
+
+# If you want to allow non-ASCII filenames set this variable to true.
+allownonascii=$(git config --type=bool hooks.allownonascii)
+
+# Redirect output to stderr.
+exec 1>&2
+
+# Cross platform projects tend to avoid non-ASCII filenames; prevent
+# them from being added to the repository. We exploit the fact that the
+# printable range starts at the space character and ends with tilde.
+if [ "$allownonascii" != "true" ] &&
+	# Note that the use of brackets around a tr range is ok here, (it's
+	# even required, for portability to Solaris 10's /usr/bin/tr), since
+	# the square bracket bytes happen to fall in the designated range.
+	test $(git diff-index --cached --name-only --diff-filter=A -z $against |
+	  LC_ALL=C tr -d '[ -~]\0' | wc -c) != 0
+then
+	cat <<\EOF
+Error: Attempt to add a non-ASCII file name.
+
+This can cause problems if you want to work with people on other platforms.
+
+To be portable it is advisable to rename the file.
+
+If you know what you are doing you can disable this check using:
+
+  git config hooks.allownonascii true
+EOF
+	exit 1
+fi
+
+# If there are whitespace errors, print the offending file names and fail.
+exec git diff-index --check --cached $against --

data/git/repositories/admin/applications.git/hooks/pre-merge-commit.sample

@@ -0,0 +1,13 @@
+#!/bin/sh
+#
+# An example hook script to verify what is about to be committed.
+# Called by "git merge" with no arguments.  The hook should
+# exit with non-zero status after issuing an appropriate message to
+# stderr if it wants to stop the merge commit.
+#
+# To enable this hook, rename this file to "pre-merge-commit".
+
+. git-sh-setup
+test -x "$GIT_DIR/hooks/pre-commit" &&
+        exec "$GIT_DIR/hooks/pre-commit"
+:

data/git/repositories/admin/applications.git/hooks/pre-push.sample

@@ -0,0 +1,53 @@
+#!/bin/sh
+
+# An example hook script to verify what is about to be pushed.  Called by "git
+# push" after it has checked the remote status, but before anything has been
+# pushed.  If this script exits with a non-zero status nothing will be pushed.
+#
+# This hook is called with the following parameters:
+#
+# $1 -- Name of the remote to which the push is being done
+# $2 -- URL to which the push is being done
+#
+# If pushing without using a named remote those arguments will be equal.
+#
+# Information about the commits which are being pushed is supplied as lines to
+# the standard input in the form:
+#
+#   <local ref> <local oid> <remote ref> <remote oid>
+#
+# This sample shows how to prevent push of commits where the log message starts
+# with "WIP" (work in progress).
+
+remote="$1"
+url="$2"
+
+zero=$(git hash-object --stdin </dev/null | tr '[0-9a-f]' '0')
+
+while read local_ref local_oid remote_ref remote_oid
+do
+	if test "$local_oid" = "$zero"
+	then
+		# Handle delete
+		:
+	else
+		if test "$remote_oid" = "$zero"
+		then
+			# New branch, examine all commits
+			range="$local_oid"
+		else
+			# Update to existing branch, examine new commits
+			range="$remote_oid..$local_oid"
+		fi
+
+		# Check for WIP commit
+		commit=$(git rev-list -n 1 --grep '^WIP' "$range")
+		if test -n "$commit"
+		then
+			echo >&2 "Found WIP commit in $local_ref, not pushing"
+			exit 1
+		fi
+	fi
+done
+
+exit 0

data/git/repositories/admin/applications.git/hooks/pre-rebase.sample

@@ -0,0 +1,169 @@
+#!/bin/sh
+#
+# Copyright (c) 2006, 2008 Junio C Hamano
+#
+# The "pre-rebase" hook is run just before "git rebase" starts doing
+# its job, and can prevent the command from running by exiting with
+# non-zero status.
+#
+# The hook is called with the following parameters:
+#
+# $1 -- the upstream the series was forked from.
+# $2 -- the branch being rebased (or empty when rebasing the current branch).
+#
+# This sample shows how to prevent topic branches that are already
+# merged to 'next' branch from getting rebased, because allowing it
+# would result in rebasing already published history.
+
+publish=next
+basebranch="$1"
+if test "$#" = 2
+then
+	topic="refs/heads/$2"
+else
+	topic=`git symbolic-ref HEAD` ||
+	exit 0 ;# we do not interrupt rebasing detached HEAD
+fi
+
+case "$topic" in
+refs/heads/??/*)
+	;;
+*)
+	exit 0 ;# we do not interrupt others.
+	;;
+esac
+
+# Now we are dealing with a topic branch being rebased
+# on top of master.  Is it OK to rebase it?
+
+# Does the topic really exist?
+git show-ref -q "$topic" || {
+	echo >&2 "No such branch $topic"
+	exit 1
+}
+
+# Is topic fully merged to master?
+not_in_master=`git rev-list --pretty=oneline ^master "$topic"`
+if test -z "$not_in_master"
+then
+	echo >&2 "$topic is fully merged to master; better remove it."
+	exit 1 ;# we could allow it, but there is no point.
+fi
+
+# Is topic ever merged to next?  If so you should not be rebasing it.
+only_next_1=`git rev-list ^master "^$topic" ${publish} | sort`
+only_next_2=`git rev-list ^master           ${publish} | sort`
+if test "$only_next_1" = "$only_next_2"
+then
+	not_in_topic=`git rev-list "^$topic" master`
+	if test -z "$not_in_topic"
+	then
+		echo >&2 "$topic is already up to date with master"
+		exit 1 ;# we could allow it, but there is no point.
+	else
+		exit 0
+	fi
+else
+	not_in_next=`git rev-list --pretty=oneline ^${publish} "$topic"`
+	/usr/bin/perl -e '
+		my $topic = $ARGV[0];
+		my $msg = "* $topic has commits already merged to public branch:\n";
+		my (%not_in_next) = map {
+			/^([0-9a-f]+) /;
+			($1 => 1);
+		} split(/\n/, $ARGV[1]);
+		for my $elem (map {
+				/^([0-9a-f]+) (.*)$/;
+				[$1 => $2];
+			} split(/\n/, $ARGV[2])) {
+			if (!exists $not_in_next{$elem->[0]}) {
+				if ($msg) {
+					print STDERR $msg;
+					undef $msg;
+				}
+				print STDERR " $elem->[1]\n";
+			}
+		}
+	' "$topic" "$not_in_next" "$not_in_master"
+	exit 1
+fi
+
+<<\DOC_END
+
+This sample hook safeguards topic branches that have been
+published from being rewound.
+
+The workflow assumed here is:
+
+ * Once a topic branch forks from "master", "master" is never
+   merged into it again (either directly or indirectly).
+
+ * Once a topic branch is fully cooked and merged into "master",
+   it is deleted.  If you need to build on top of it to correct
+   earlier mistakes, a new topic branch is created by forking at
+   the tip of the "master".  This is not strictly necessary, but
+   it makes it easier to keep your history simple.
+
+ * Whenever you need to test or publish your changes to topic
+   branches, merge them into "next" branch.
+
+The script, being an example, hardcodes the publish branch name
+to be "next", but it is trivial to make it configurable via
+$GIT_DIR/config mechanism.
+
+With this workflow, you would want to know:
+
+(1) ... if a topic branch has ever been merged to "next".  Young
+    topic branches can have stupid mistakes you would rather
+    clean up before publishing, and things that have not been
+    merged into other branches can be easily rebased without
+    affecting other people.  But once it is published, you would
+    not want to rewind it.
+
+(2) ... if a topic branch has been fully merged to "master".
+    Then you can delete it.  More importantly, you should not
+    build on top of it -- other people may already want to
+    change things related to the topic as patches against your
+    "master", so if you need further changes, it is better to
+    fork the topic (perhaps with the same name) afresh from the
+    tip of "master".
+
+Let's look at this example:
+
+		   o---o---o---o---o---o---o---o---o---o "next"
+		  /       /           /           /
+		 /   a---a---b A     /           /
+		/   /               /           /
+	       /   /   c---c---c---c B         /
+	      /   /   /             \         /
+	     /   /   /   b---b C     \       /
+	    /   /   /   /             \     /
+    ---o---o---o---o---o---o---o---o---o---o---o "master"
+
+
+A, B and C are topic branches.
+
+ * A has one fix since it was merged up to "next".
+
+ * B has finished.  It has been fully merged up to "master" and "next",
+   and is ready to be deleted.
+
+ * C has not merged to "next" at all.
+
+We would want to allow C to be rebased, refuse A, and encourage
+B to be deleted.
+
+To compute (1):
+
+	git rev-list ^master ^topic next
+	git rev-list ^master        next
+
+	if these match, topic has not merged in next at all.
+
+To compute (2):
+
+	git rev-list master..topic
+
+	if this is empty, it is fully merged to "master".
+
+DOC_END

data/git/repositories/admin/applications.git/hooks/pre-receive

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# AUTO GENERATED BY GITEA, DO NOT MODIFY
+data=$(cat)
+exitcodes=""
+hookname=$(basename $0)
+GIT_DIR=${GIT_DIR:-$(dirname $0)/..}
+
+for hook in ${GIT_DIR}/hooks/${hookname}.d/*; do
+  test -x "${hook}" && test -f "${hook}" || continue
+  echo "${data}" | "${hook}"
+  exitcodes="${exitcodes} $?"
+done
+
+for i in ${exitcodes}; do
+  [ ${i} -eq 0 ] || exit ${i}
+done

data/git/repositories/admin/applications.git/hooks/pre-receive.d/gitea

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+# AUTO GENERATED BY GITEA, DO NOT MODIFY
+/usr/local/bin/gitea hook --config=/data/gitea/conf/app.ini pre-receive

data/git/repositories/admin/applications.git/hooks/pre-receive.sample

@@ -0,0 +1,24 @@
+#!/bin/sh
+#
+# An example hook script to make use of push options.
+# The example simply echoes all push options that start with 'echoback='
+# and rejects all pushes when the "reject" push option is used.
+#
+# To enable this hook, rename this file to "pre-receive".
+
+if test -n "$GIT_PUSH_OPTION_COUNT"
+then
+	i=0
+	while test "$i" -lt "$GIT_PUSH_OPTION_COUNT"
+	do
+		eval "value=\$GIT_PUSH_OPTION_$i"
+		case "$value" in
+		echoback=*)
+			echo "echo from the pre-receive-hook: ${value#*=}" >&2
+			;;
+		reject)
+			exit 1
+		esac
+		i=$((i + 1))
+	done
+fi

data/git/repositories/admin/applications.git/hooks/prepare-commit-msg.sample

@@ -0,0 +1,42 @@
+#!/bin/sh
+#
+# An example hook script to prepare the commit log message.
+# Called by "git commit" with the name of the file that has the
+# commit message, followed by the description of the commit
+# message's source.  The hook's purpose is to edit the commit
+# message file.  If the hook fails with a non-zero status,
+# the commit is aborted.
+#
+# To enable this hook, rename this file to "prepare-commit-msg".
+
+# This hook includes three examples. The first one removes the
+# "# Please enter the commit message..." help message.
+#
+# The second includes the output of "git diff --name-status -r"
+# into the message, just before the "git status" output.  It is
+# commented because it doesn't cope with --amend or with squashed
+# commits.
+#
+# The third example adds a Signed-off-by line to the message, that can
+# still be edited.  This is rarely a good idea.
+
+COMMIT_MSG_FILE=$1
+COMMIT_SOURCE=$2
+SHA1=$3
+
+/usr/bin/perl -i.bak -ne 'print unless(m/^. Please enter the commit message/..m/^#$/)' "$COMMIT_MSG_FILE"
+
+# case "$COMMIT_SOURCE,$SHA1" in
+#  ,|template,)
+#    /usr/bin/perl -i.bak -pe '
+#       print "\n" . `git diff --cached --name-status -r`
+# 	 if /^#/ && $first++ == 0' "$COMMIT_MSG_FILE" ;;
+#  *) ;;
+# esac
+
+# SOB=$(git var GIT_COMMITTER_IDENT | sed -n 's/^\(.*>\).*$/Signed-off-by: \1/p')
+# git interpret-trailers --in-place --trailer "$SOB" "$COMMIT_MSG_FILE"
+# if test -z "$COMMIT_SOURCE"
+# then
+#   /usr/bin/perl -i.bak -pe 'print "\n" if !$first_line++' "$COMMIT_MSG_FILE"
+# fi

data/git/repositories/admin/applications.git/hooks/proc-receive

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+# AUTO GENERATED BY GITEA, DO NOT MODIFY
+/usr/local/bin/gitea hook --config=/data/gitea/conf/app.ini proc-receive

data/git/repositories/admin/applications.git/hooks/push-to-checkout.sample

@@ -0,0 +1,78 @@
+#!/bin/sh
+
+# An example hook script to update a checked-out tree on a git push.
+#
+# This hook is invoked by git-receive-pack(1) when it reacts to git
+# push and updates reference(s) in its repository, and when the push
+# tries to update the branch that is currently checked out and the
+# receive.denyCurrentBranch configuration variable is set to
+# updateInstead.
+#
+# By default, such a push is refused if the working tree and the index
+# of the remote repository has any difference from the currently
+# checked out commit; when both the working tree and the index match
+# the current commit, they are updated to match the newly pushed tip
+# of the branch. This hook is to be used to override the default
+# behaviour; however the code below reimplements the default behaviour
+# as a starting point for convenient modification.
+#
+# The hook receives the commit with which the tip of the current
+# branch is going to be updated:
+commit=$1
+
+# It can exit with a non-zero status to refuse the push (when it does
+# so, it must not modify the index or the working tree).
+die () {
+	echo >&2 "$*"
+	exit 1
+}
+
+# Or it can make any necessary changes to the working tree and to the
+# index to bring them to the desired state when the tip of the current
+# branch is updated to the new commit, and exit with a zero status.
+#
+# For example, the hook can simply run git read-tree -u -m HEAD "$1"
+# in order to emulate git fetch that is run in the reverse direction
+# with git push, as the two-tree form of git read-tree -u -m is
+# essentially the same as git switch or git checkout that switches
+# branches while keeping the local changes in the working tree that do
+# not interfere with the difference between the branches.
+
+# The below is a more-or-less exact translation to shell of the C code
+# for the default behaviour for git's push-to-checkout hook defined in
+# the push_to_deploy() function in builtin/receive-pack.c.
+#
+# Note that the hook will be executed from the repository directory,
+# not from the working tree, so if you want to perform operations on
+# the working tree, you will have to adapt your code accordingly, e.g.
+# by adding "cd .." or using relative paths.
+
+if ! git update-index -q --ignore-submodules --refresh
+then
+	die "Up-to-date check failed"
+fi
+
+if ! git diff-files --quiet --ignore-submodules --
+then
+	die "Working directory has unstaged changes"
+fi
+
+# This is a rough translation of:
+#
+#   head_has_history() ? "HEAD" : EMPTY_TREE_SHA1_HEX
+if git cat-file -e HEAD 2>/dev/null
+then
+	head=HEAD
+else
+	head=$(git hash-object -t tree --stdin </dev/null)
+fi
+
+if ! git diff-index --quiet --cached --ignore-submodules $head --
+then
+	die "Working directory has staged changes"
+fi
+
+if ! git read-tree -u -m "$commit"
+then
+	die "Could not update working tree to new HEAD"
+fi

data/git/repositories/admin/applications.git/hooks/sendemail-validate.sample

@@ -0,0 +1,77 @@
+#!/bin/sh
+
+# An example hook script to validate a patch (and/or patch series) before
+# sending it via email.
+#
+# The hook should exit with non-zero status after issuing an appropriate
+# message if it wants to prevent the email(s) from being sent.
+#
+# To enable this hook, rename this file to "sendemail-validate".
+#
+# By default, it will only check that the patch(es) can be applied on top of
+# the default upstream branch without conflicts in a secondary worktree. After
+# validation (successful or not) of the last patch of a series, the worktree
+# will be deleted.
+#
+# The following config variables can be set to change the default remote and
+# remote ref that are used to apply the patches against:
+#
+#   sendemail.validateRemote (default: origin)
+#   sendemail.validateRemoteRef (default: HEAD)
+#
+# Replace the TODO placeholders with appropriate checks according to your
+# needs.
+
+validate_cover_letter () {
+	file="$1"
+	# TODO: Replace with appropriate checks (e.g. spell checking).
+	true
+}
+
+validate_patch () {
+	file="$1"
+	# Ensure that the patch applies without conflicts.
+	git am -3 "$file" || return
+	# TODO: Replace with appropriate checks for this patch
+	# (e.g. checkpatch.pl).
+	true
+}
+
+validate_series () {
+	# TODO: Replace with appropriate checks for the whole series
+	# (e.g. quick build, coding style checks, etc.).
+	true
+}
+
+# main -------------------------------------------------------------------------
+
+if test "$GIT_SENDEMAIL_FILE_COUNTER" = 1
+then
+	remote=$(git config --default origin --get sendemail.validateRemote) &&
+	ref=$(git config --default HEAD --get sendemail.validateRemoteRef) &&
+	worktree=$(mktemp --tmpdir -d sendemail-validate.XXXXXXX) &&
+	git worktree add -fd --checkout "$worktree" "refs/remotes/$remote/$ref" &&
+	git config --replace-all sendemail.validateWorktree "$worktree"
+else
+	worktree=$(git config --get sendemail.validateWorktree)
+fi || {
+	echo "sendemail-validate: error: failed to prepare worktree" >&2
+	exit 1
+}
+
+unset GIT_DIR GIT_WORK_TREE
+cd "$worktree" &&
+
+if grep -q "^diff --git " "$1"
+then
+	validate_patch "$1"
+else
+	validate_cover_letter "$1"
+fi &&
+
+if test "$GIT_SENDEMAIL_FILE_COUNTER" = "$GIT_SENDEMAIL_FILE_TOTAL"
+then
+	git config --unset-all sendemail.validateWorktree &&
+	trap 'git worktree remove -ff "$worktree"' EXIT &&
+	validate_series
+fi

data/git/repositories/admin/applications.git/hooks/update

@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+# AUTO GENERATED BY GITEA, DO NOT MODIFY
+exitcodes=""
+hookname=$(basename $0)
+GIT_DIR=${GIT_DIR:-$(dirname $0/..)}
+
+for hook in ${GIT_DIR}/hooks/${hookname}.d/*; do
+  test -x "${hook}" && test -f "${hook}" || continue
+  "${hook}" $1 $2 $3
+  exitcodes="${exitcodes} $?"
+done
+
+for i in ${exitcodes}; do
+  [ ${i} -eq 0 ] || exit ${i}
+done

data/git/repositories/admin/applications.git/hooks/update.d/gitea

@@ -0,0 +1,3 @@
+#!/usr/bin/env bash
+# AUTO GENERATED BY GITEA, DO NOT MODIFY
+/usr/local/bin/gitea hook --config=/data/gitea/conf/app.ini update $1 $2 $3

data/git/repositories/admin/applications.git/hooks/update.sample

@@ -0,0 +1,128 @@
+#!/bin/sh
+#
+# An example hook script to block unannotated tags from entering.
+# Called by "git receive-pack" with arguments: refname sha1-old sha1-new
+#
+# To enable this hook, rename this file to "update".
+#
+# Config
+# ------
+# hooks.allowunannotated
+#   This boolean sets whether unannotated tags will be allowed into the
+#   repository.  By default they won't be.
+# hooks.allowdeletetag
+#   This boolean sets whether deleting tags will be allowed in the
+#   repository.  By default they won't be.
+# hooks.allowmodifytag
+#   This boolean sets whether a tag may be modified after creation. By default
+#   it won't be.
+# hooks.allowdeletebranch
+#   This boolean sets whether deleting branches will be allowed in the
+#   repository.  By default they won't be.
+# hooks.denycreatebranch
+#   This boolean sets whether remotely creating branches will be denied
+#   in the repository.  By default this is allowed.
+#
+
+# --- Command line
+refname="$1"
+oldrev="$2"
+newrev="$3"
+
+# --- Safety check
+if [ -z "$GIT_DIR" ]; then
+	echo "Don't run this script from the command line." >&2
+	echo " (if you want, you could supply GIT_DIR then run" >&2
+	echo "  $0 <ref> <oldrev> <newrev>)" >&2
+	exit 1
+fi
+
+if [ -z "$refname" -o -z "$oldrev" -o -z "$newrev" ]; then
+	echo "usage: $0 <ref> <oldrev> <newrev>" >&2
+	exit 1
+fi
+
+# --- Config
+allowunannotated=$(git config --type=bool hooks.allowunannotated)
+allowdeletebranch=$(git config --type=bool hooks.allowdeletebranch)
+denycreatebranch=$(git config --type=bool hooks.denycreatebranch)
+allowdeletetag=$(git config --type=bool hooks.allowdeletetag)
+allowmodifytag=$(git config --type=bool hooks.allowmodifytag)
+
+# check for no description
+projectdesc=$(sed -e '1q' "$GIT_DIR/description")
+case "$projectdesc" in
+"Unnamed repository"* | "")
+	echo "*** Project description file hasn't been set" >&2
+	exit 1
+	;;
+esac
+
+# --- Check types
+# if $newrev is 0000...0000, it's a commit to delete a ref.
+zero=$(git hash-object --stdin </dev/null | tr '[0-9a-f]' '0')
+if [ "$newrev" = "$zero" ]; then
+	newrev_type=delete
+else
+	newrev_type=$(git cat-file -t $newrev)
+fi
+
+case "$refname","$newrev_type" in
+	refs/tags/*,commit)
+		# un-annotated tag
+		short_refname=${refname##refs/tags/}
+		if [ "$allowunannotated" != "true" ]; then
+			echo "*** The un-annotated tag, $short_refname, is not allowed in this repository" >&2
+			echo "*** Use 'git tag [ -a | -s ]' for tags you want to propagate." >&2
+			exit 1
+		fi
+		;;
+	refs/tags/*,delete)
+		# delete tag
+		if [ "$allowdeletetag" != "true" ]; then
+			echo "*** Deleting a tag is not allowed in this repository" >&2
+			exit 1
+		fi
+		;;
+	refs/tags/*,tag)
+		# annotated tag
+		if [ "$allowmodifytag" != "true" ] && git rev-parse $refname > /dev/null 2>&1
+		then
+			echo "*** Tag '$refname' already exists." >&2
+			echo "*** Modifying a tag is not allowed in this repository." >&2
+			exit 1
+		fi
+		;;
+	refs/heads/*,commit)
+		# branch
+		if [ "$oldrev" = "$zero" -a "$denycreatebranch" = "true" ]; then
+			echo "*** Creating a branch is not allowed in this repository" >&2
+			exit 1
+		fi
+		;;
+	refs/heads/*,delete)
+		# delete branch
+		if [ "$allowdeletebranch" != "true" ]; then
+			echo "*** Deleting a branch is not allowed in this repository" >&2
+			exit 1
+		fi
+		;;
+	refs/remotes/*,commit)
+		# tracking branch
+		;;
+	refs/remotes/*,delete)
+		# delete tracking branch
+		if [ "$allowdeletebranch" != "true" ]; then
+			echo "*** Deleting a tracking branch is not allowed in this repository" >&2
+			exit 1
+		fi
+		;;
+	*)
+		# Anything else (is there anything else?)
+		echo "*** Update hook: unknown type of update to ref $refname of type $newrev_type" >&2
+		exit 1
+		;;
+esac
+
+# --- Finished
+exit 0

data/git/repositories/admin/applications.git/info/exclude

@@ -0,0 +1,6 @@
+# git ls-files --others --exclude-from=.git/info/exclude
+# Lines that start with '#' are comments.
+# For a project mostly in C, the following would be a good set of
+# exclude patterns (uncomment them if you want to use them):
+# *.[oa]
+# *~

data/git/repositories/admin/applications.git/info/refs

@@ -0,0 +1 @@
+d0f513c0446c3aa465bda4cfdf3a8c219af18712	refs/heads/main

data/git/repositories/admin/applications.git/logs/HEAD

@@ -0,0 +1,11 @@
+0000000000000000000000000000000000000000 aa61d1cce935ea0e2414a7c6388835402ef3ed9a Gitea <gitea@fake.local> 1737617960 +0000	push
+aa61d1cce935ea0e2414a7c6388835402ef3ed9a 553b73a62670c12e12a1c4a58f051f63362ab1a6 Gitea <gitea@fake.local> 1737618198 +0000	push
+553b73a62670c12e12a1c4a58f051f63362ab1a6 bbc0e7bea00d3554e3ac38a1c756d35d36145691 Gitea <gitea@fake.local> 1737618718 +0000	push
+bbc0e7bea00d3554e3ac38a1c756d35d36145691 4a459b0ceb420d456f69cae60f1297be4dd015e6 Gitea <gitea@fake.local> 1737619885 +0000	push
+4a459b0ceb420d456f69cae60f1297be4dd015e6 37780c7452b65fd0b8513e884fe6b147d3b65e39 Gitea <gitea@fake.local> 1737620050 +0000	push
+37780c7452b65fd0b8513e884fe6b147d3b65e39 02dd4c2b99971daadf268d9d84e5b337a1653aa3 Gitea <gitea@fake.local> 1737620168 +0000	push
+02dd4c2b99971daadf268d9d84e5b337a1653aa3 fd3f47fbbdd8744c44d3cd1f40cfb2fd6d865bb2 Gitea <gitea@fake.local> 1737620366 +0000	push
+fd3f47fbbdd8744c44d3cd1f40cfb2fd6d865bb2 aee37fa526021646b627b254f3e84be92bd9778d Gitea <gitea@fake.local> 1737621737 +0000	push
+aee37fa526021646b627b254f3e84be92bd9778d 499593b845445ab936cc897874163db90abff8a5 Gitea <gitea@fake.local> 1737621839 +0000	push
+499593b845445ab936cc897874163db90abff8a5 c82d02a9f3d395dd5179621b10610ddc36cdde9d Gitea <gitea@fake.local> 1737622085 +0000	push
+c82d02a9f3d395dd5179621b10610ddc36cdde9d d0f513c0446c3aa465bda4cfdf3a8c219af18712 Gitea <gitea@fake.local> 1737622161 +0000	push

data/git/repositories/admin/applications.git/logs/refs/heads/main

@@ -0,0 +1,11 @@
+0000000000000000000000000000000000000000 aa61d1cce935ea0e2414a7c6388835402ef3ed9a Gitea <gitea@fake.local> 1737617960 +0000	push
+aa61d1cce935ea0e2414a7c6388835402ef3ed9a 553b73a62670c12e12a1c4a58f051f63362ab1a6 Gitea <gitea@fake.local> 1737618198 +0000	push
+553b73a62670c12e12a1c4a58f051f63362ab1a6 bbc0e7bea00d3554e3ac38a1c756d35d36145691 Gitea <gitea@fake.local> 1737618718 +0000	push
+bbc0e7bea00d3554e3ac38a1c756d35d36145691 4a459b0ceb420d456f69cae60f1297be4dd015e6 Gitea <gitea@fake.local> 1737619885 +0000	push
+4a459b0ceb420d456f69cae60f1297be4dd015e6 37780c7452b65fd0b8513e884fe6b147d3b65e39 Gitea <gitea@fake.local> 1737620050 +0000	push
+37780c7452b65fd0b8513e884fe6b147d3b65e39 02dd4c2b99971daadf268d9d84e5b337a1653aa3 Gitea <gitea@fake.local> 1737620168 +0000	push
+02dd4c2b99971daadf268d9d84e5b337a1653aa3 fd3f47fbbdd8744c44d3cd1f40cfb2fd6d865bb2 Gitea <gitea@fake.local> 1737620366 +0000	push
+fd3f47fbbdd8744c44d3cd1f40cfb2fd6d865bb2 aee37fa526021646b627b254f3e84be92bd9778d Gitea <gitea@fake.local> 1737621737 +0000	push
+aee37fa526021646b627b254f3e84be92bd9778d 499593b845445ab936cc897874163db90abff8a5 Gitea <gitea@fake.local> 1737621839 +0000	push
+499593b845445ab936cc897874163db90abff8a5 c82d02a9f3d395dd5179621b10610ddc36cdde9d Gitea <gitea@fake.local> 1737622085 +0000	push
+c82d02a9f3d395dd5179621b10610ddc36cdde9d d0f513c0446c3aa465bda4cfdf3a8c219af18712 Gitea <gitea@fake.local> 1737622161 +0000	push

data/git/repositories/admin/applications.git/objects/09/ef5220b16b583941723512da9e3bf95ad149b5

@@ -0,0 +1,7 @@
+x
<01>Yێ<59>6<10>s<EFBFBD>b <20><><1D>JӢ
<1A>ɶh<C9B6>"A<>҇"(hi<68>%V&<15>rv<72>ɿwH<77>2%<25>b;	<09><>Ŗar8s<38>r<EFBFBD><72>U!W<><57><EFBFBD>G?}sw<73><77><1C>\ $<24><><EFBFBD><EFBFBD>A<EFBFBD><41><EFBFBD>KY<4B>K<EFBFBD><4B>>ܳ+KŅYە<59><DB95><EFBFBD>bG	<09><>X Әڥ<D398>_<EFBFBD>d<19>{0<><<3C><>=<3D><><EFBFBD>Z<EFBFBD><5A>
+$<24><>`<14>;ĝ2<C49D>ϋ<EFBFBD>0\<5C>iN<69>^H<><48>V|>޿<07><><15>+T`$d
+<EFBFBD>A`<60>aE<><45>T <20><>w<EFBFBD><77><EFBFBD><EFBFBD><EFBFBD>(<28><><EFBFBD><EFBFBD><EFBFBD>B<EFBFBD>7<EFBFBD><37>
<01><><EFBFBD>ȥ!<21>7<EFBFBD><37>fE<66>:U+<2B><><EFBFBD>IQ<49>U<EFBFBD><55><12>8`5N<35>B#<23>!<21>UF<55>t<EFBFBD><74><0C>am<61><0E>;<3B>
+^Vj<>vF<18><0C><><EFBFBD><EFBFBD><17>PZנ<5A>n<EFBFBD>bn7<6E><15><><EFBFBD>c<EFBFBD><63>E<EFBFBD><45>"<22><>,1<14>x<0B>~9<><02>;<3B><><EFBFBD>A<EFBFBD>²<EFBFBD>E<>Վg䪵<67><E4AAB5>?<3F>6-<2D>J%[<5B><><EFBFBD><EFBFBD>R#<23><>T<1B><>/
+<EFBFBD>5<EFBFBD><EFBFBD><EFBFBD>m-Ǜ<>4ܢ0<DCA2>H<EFBFBD><48><1D>_Ha(<28>^L`<60><><EFBFBD>گ9<DAAF><39>0<EFBFBD>eQQM<>P\<5C>Ko<4B><6F>r'<04>S<EFBFBD><53><EFBFBD>vx<76>wN<77><4E>`<60><><EFBFBD>ƚC<C69A><43>(<28><1C><>8\c<><63><19><><EFBFBD>+S<>b<EFBFBD>]aN
<01><><EFBFBD>h<EFBFBD>$_+<2B><>x0<78><30><19>X߆Yo<59><6F><EFBFBD><EFBFBD><0F><><EFBFBD>>;<3B><><EFBFBD>i<EFBFBD>R<EFBFBD>{w<>%<25>W<EFBFBD>)<29>Ϝ%c飜3pÇ4
+)<29>FC<46>&<26>2#<23><><EFBFBD>8Ln/Q<>JQ&<1E>k<EFBFBD>9<EFBFBD><39>x7<>.<2E>N<EFBFBD><4E><15><>h鍐<68>J<EFBFBD>!<21>TH<54>Љ<EFBFBD>#<23><0B><>vm<76><6D>|<7C>m<EFBFBD>؇<EFBFBD>1K"u<04><>"<22><>Liy<69>1<EFBFBD><0B>/<2F>аC<D0B0>*<
+[<5B><0F>?=;<3B><>t<05>Vy<56><<3C> l<><6C>`<14><>b<EFBFBD><62>\ѷ<19><><EFBFBD>aOK<>u)<29><>i
<<3C>*&6<08>Z<15><>o<1E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><0B><>#<23><>S<EFBFBD><53>N@<40>i

data/git/repositories/admin/applications.git/objects/16/e550d4fef4c946683c98cc112d540537ac96c9

@@ -0,0 +1,2 @@
+x
<01><>;<0E>0<0C><>{
+_ <20>J<15>LH 	<09><12><><EFBFBD><8=ma<6D>@WV<56><7F><1B>A?<3F><>%<1A><>5<EFBFBD>\L<07>`<60>S0<53><30>c+5d<35>J<EFBFBD><4A>ha<68><61>B<EFBFBD>.<2E><>q<17>\+<2B><><EFBFBD><EFBFBD><EFBFBD>@<40>ѵ–<D1B5><C296>~zs <20>߮b<>d<EFBFBD>P<17><>p<EFBFBD>KX<4B>^J)<29>cJ<63><4A><EFBFBD>v<EFBFBD>l]<5D><19>u(<28><>t]<><06>Iu<49>

data/git/repositories/admin/applications.git/objects/44/d531088e479856e9c32b361661d61120440432

@@ -0,0 +1,2 @@
+x
<01><>K
+<EFBFBD>0<10>]{<7B><><EFBFBD><EFBFBD>B<EFBFBD>&<26>}<7D><>40y`<60><><12>{m<>9<EFBFBD><39><EFBFBD><EFBFBD>=M<>4<EFBFBD><34>6<><36><EFBFBD>U<>.<2E>CD2<44><32><EFBFBD>h<EFBFBD><68>3W<33><57>R<EFBFBD>P<EFBFBD><50>q<EFBFBD><71>uLH<4C><48>v<1F>E<EFBFBD>ᄙ<EFBFBD><E18499>[ю<><D18E>@~<7E>{<7B><0B>D_`

data/git/repositories/admin/applications.git/objects/49/9593b845445ab936cc897874163db90abff8a5

@@ -0,0 +1,2 @@
+x
<01><>=<0E>0<0C>a<EFBFBD><61><EFBFBD>;j<>4n$<24><>J<1C>?RKP==]8
ۧwx<77><78><EFBFBD>mKt<>Ԫ*d<><64>1[<5B>>Z<><11>
+F

data/git/repositories/admin/applications.git/objects/4a/459b0ceb420d456f69cae60f1297be4dd015e6

@@ -0,0 +1,2 @@
+x
<01><>A<EFBFBD>!Eg<45>)j?<10><>ւ0<D682>*<2A>UI7<49><37>`<60>,<2C><>q3'<27><><EFBFBD><EFBFBD>?^m<><6D>
+<EFBFBD>H_<EFBFBD><EFBFBD><EFBFBD>'

data/git/repositories/admin/applications.git/objects/55/3b73a62670c12e12a1c4a58f051f63362ab1a6

@@ -0,0 +1,4 @@
+x
<01><>K
+<EFBFBD>0@]<5D><14>J<><4A>o@īL<C4AB><4C>-XSB<53><42><EFBFBD>v<EFBFBD>	<09>=<3D><><EFBFBD>J۶u<DBB6>E<EFBFBD><45>.E<><45><14><>.h2<68>Y<EFBFBD>-9<><39>Xs$
+z<>j<EFBFBD>.<2E>
<01><>TS<54>za-<2D>DZL)<29>w<EFBFBD><77><13>+<2B><><EFBFBD>uȲ<75><C8B2><0E>|</+<2B>~4<>Ǽ<EFBFBD><C7BC><EFBFBD>J<EFBFBD><4A>`"<22>`<60>!W<><57><EFBFBD>i<EFBFBD><69>!$<14>
+<EFBFBD><EFBFBD><06><><EFBFBD>UL<>

data/git/repositories/admin/applications.git/objects/7a/35ca383d4952f391bd94c4e130375e2459777c

@@ -0,0 +1 @@
+x
<1D>A<0E>09<><15><><EFBFBD>
%?<3F>V<EFBFBD><03>1UE<55><45>$D<><44><EFBFBD><EFBFBD>v<EFBFBD><76><EFBFBD><EFBFBD>M`<60>f˭X<1A>d

data/git/repositories/admin/applications.git/objects/89/a751b1b695eff2e6188eaa01467dbe3cddd057

@@ -0,0 +1,2 @@
+x
<01>VMo<4D>@<0C><>_a<5F><61>
+ȑ<><C891><02>rD<1C><>ݎ:a><3E>Ϳg<<3C>&<26>4<EFBFBD>ѥUE.<2E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>'<27>4%<25>~<7E><><EFBFBD><17><>.dp<64>쥑<EFBFBD>^<5E>Z<EFBFBD>M<EFBFBD>I5=<3D>"ȡ<>,l<>(;<3B><><16>̢<EFBFBD><CCA2><EFBFBD><EFBFBD><EFBFBD><05><>a)	<09>j<><6A> }t@<40><>vv<76><76><EFBFBD><1A>SEz<45><7A><EFBFBD><EFBFBD>ü<><C3BC>W9"<22>}@<15>	Ш<>5X(SS<53><53><EFBFBD>3J~hא<16>~ y~<7E>;~<7E>~<7E>Y<EFBFBD>I_<49><0B>6t
<01><14><>%<25>W<EFBFBD>(p<><70><EFBFBD><EFBFBD>Q<EFBFBD>