Capistrano and vpn secured svn

Rails Deployment
1

So, I would really like to be using Capistrano but I’m running into a
problem when I cap deploy. It looks like cap will try and connect to my
subversion repo but its behind a windows VPN. The production server is
centos and I’m looking at vpn tunneling options but wondered if anyone
here
has done this before.

Thanks guys!

2

So, I would really like to be using Capistrano but I’m running into a
problem when I cap deploy. It looks like cap will try and connect to my
subversion repo but its behind a windows VPN. The production server is
centos and I’m looking at vpn tunneling options but wondered if anyone here
has done this before.

I haven’t done it for this, but for other things… perhaps configure
the
SSH command that capistrano uses to setup a tunnel so that capistrano
tries to connect to a local svn repository on some other port that
triggers the tunnel back to your real svn repo?

If cap can’t do it directly, you could certainly start the tunnel before
hand…

That seems like it would be the easiest way to do it.

3

Thanks for input Philip!

I can live with starting the tunnel manually and automating later on
—can
you (or anyone here) recommend a good command line based vpn tunneling
client?

4

You could also use SVK or svnsync to mirror your repo outside of the
VPN…

5

Thanks for input Philip!

I can live with starting the tunnel manually and automating later on —can
you (or anyone here) recommend a good command line based vpn tunneling
client?

Hrm… I meant use ssh’s built in tunneling (port forwarding)…

-R port:host:hostport
Specifies that the given port on the remote (server) host is to be
forwarded to the given host and port on the local side. This works by
allocating a socket to listen to port on the remote side, and whenever a
connection is made to this port, the connec- tion is forwarded over the
secure channel, and a connection is made to host port hostport from the
local machine. Port forward- ings can also be specified in the
configuration file. Privileged ports can be forwarded only when logging
in as root on the remote machine. IPv6 addresses can be specified with
an alternative syntax: port/host/hostport.

So, something like…

ssh -R 12345:localhost:3690 my_production_server

and then configuring things so that on your production server you’d
connect to: svn://127.0.0.1:12345/path/to/repo

-philip