最近在使用coding的代码托管，顺便设置了webhook自动部署，过程还是挺艰辛的，主要还是没搞懂linux的权限控制，不过好在弄好了，分享一下获益最深的一篇文章，供大家参考，原文是英文版的，我的英语也不行，勉强能看懂，大家凑合着看吧
原文链接：http://jondavidjohn.com/git-pull-from-a-php-script-not-so-simple/
I intended to set up a repository (hosted on BitBucket) to initiate a pull on a dev server when new commits are pushed up.
It seemed like a simple enough process. BitBucket has a service that will fire off a POST request as a post-receive hook. So I set up a receiving php script to check a randomized token and then initiate the git pull. Looking something like this...
立即学习“PHP免费学习笔记（深入）”；
<?php
define('PRIVATE_KEY', 'XXXXXXXXXXXXXXXXxxx');
if ($_SERVER['REQUEST_METHOD'] === 'POST'
&& $_REQUEST['thing'] === PRIVATE_KEY)
{
echo shell_exec("git pull");
}
Didn't end up being as simple as I had anticipated...
There were a few considerations that I did not take into account. Documenting them here will hopefully help you avoid some obstacles in trying to get something like this set up.
(Missed) Considerations
the binary (git in this case)
The user that is attempting to execute git pull is the apache user (www in our case). This user did not happen to have git in their path.
This took a while to track down because the exec() family of functions simply fail silently because they only report STDOUT and not STDERR. To get the function to report STDERR you can route it into STDOUT by adding 2->&1 at the end of your command.
After I realized this I logged in and found the full path of the git binary with which git, which is /full/path/to/bin/git.
立即学习“PHP免费学习笔记（深入）”；
<?php
...
echo shell_exec("/full/path/to/bin/git pull 2>&1");
...
Now it was reporting the next issue...
permissions
立即学习“PHP免费学习笔记（深入）”；
error: cannot open .git/FETCH_HEAD: Permission denied
The apache user also needs read and write access to the entire repository.
用 php + mysql 驱动的在线商城系统，我们的目标为中国的中小企业及个人提供最简洁，最安全，最高效的在线商城解决方案，使用了自建的会员积分折扣功能，不同的会员组有不同的折扣，让您的商店吸引更多的后续客户。 系统自动加分处理功能，自动处理会员等级，免去人工处理的工作量，让您的商店运作起来更方便省事 采用了自建的直接模板技术，免去了模板解析时间，提高了代码利用效率 独立开发的购物车系统，使用最
立即学习“PHP免费学习笔记（深入）”；
chown -R ssh_user:www repository/
It's also a good idea to make sure any files/directories inherit this ownership if being created by others by setting the group sticky bit.
立即学习“PHP免费学习笔记（深入）”；
chmod -R g+s repository/
"Host key verification failed"
Next, you need to do an intial git pull with the apache user to make sure the remote is added to the apache user's known_hosts file
立即学习“PHP免费学习笔记（深入）”；
sudo -u www git pull
ssh key
Another consideration created by this command being run by the apache user is the ssh key it uses to communicate with the remote repository.
First, I went down the path of attempting to use the GIT_SSH environment variable to set the ssh -i option to tell it to use a specific ssh key I had generated with the ssh user. I never got this to work, most likely because there are a lot of rules ssh uses to determine the safety of a given key. It requires some specific permissions regarding the user that is attempting to use the key.
An easier way I discovered was to give the apache user a home directory (via /etc/passwd) and a .ssh directory and then run the ssh-keygen command as the apache user (www)
立即学习“PHP免费学习笔记（深入）”；
sudo -u www ssh-keygen -t rsa
This creates the keys and puts them in their expected location with the proper permissions applied.
Then I added the key as a read-only key for the BitBucket repository and everything worked as expected.
以上就介绍了使用PHP自动部署GIT代码，包括了方面的内容，希望对PHP教程有兴趣的朋友有所帮助。
