11 ms·

Kallithea – A free software source code management system

102 points by conductor 12y ago

gravypod 12y ago
This looks need but I much prefer gitbucket[0]. It has been the easiest to deploy and looks better then most things out there. 0 - https://github.com/takezoe/gitbucket https://github.com/takezoe/gitbucket
- higherpurpose 12y ago
  Even Gogs? http://gogs.io/ http://gogs.io/
  - johnmaguire2013 12y ago
    Gogs is ridiculously simple. I recommend it.
    - georgealton 12y ago
      Thanks for the recommendation, will give it a go on my next project
  - gravypod 12y ago
    No, but I have seen it linked around quite a few times. I still need to give it a try eventually. I'm a Java-guy myself so using GitBucket saves time. All of the VM/compiler requirements for building& hosting it are already on all of my servers. It also adds a safety net for myself: if I find a bug, I can fix it myself without too much hard work. It's just extremely convenient for my use cases. I've heard nothing but praise for Gogs, so I definitely want to give it a..... go some time. (I'm sorry, needed to make that pun). Edit: Fixed spelling.
    - atomical 12y ago
      You can cross compile gogs locally and deploy the binary.
- SwellJoe 12y ago
  Am I wrong for wondering why this is hosted at github, if it is effectively the same sort of tool?
  - Nullabillity 12y ago
    Probably because github is free, while custom hosting can get expensive.
  - scott_karana 12y ago
    Lowers the barrier to contribution, because Github users can then see, communicate with, and contribute to it before fully committing.
- jordigh 12y ago
  The biggest reason for Kallithea to exist is that it does Mercurial. It really is the only self-hosted "hub" (edit: free) software that does it.
  - anton_gogolev 12y ago
    Shameless plug: HgLab[0] supports Mercurial as well. [0]: https://hglabhq.com https://hglabhq.com
    - jordigh 12y ago
      Right, sorry, I have amended: Kallithea is the only free "hub" software for Mercurial.
  - neandrake 12y ago
    I did some semi-extensive research to find something to use in-house for our mercurial repositories (with potential to switching to Git because so much more is available). I went with Phabricator which also supports mercurial and is free to setup in-house. It's quite a spectacular product, I recommend checking it out. Kallithea needed an update (especially for UI), but the capabilities and the look&feel of Phabricator make it very useful. https://www.phabricator.org https://www.phabricator.org
reitanqild 12y ago
Anybody knows how this compare to fossil?
- mlinksva 12y ago
  They're both free software dvcs hosting web applications, but beyond that everything is different: git,hg...fossil no issue tracking...distributed issue tracking python...c gplv3...2 clause BSD
  - isxek 12y ago
    I'd say it would be better to compare Kallithea with Chisel (http://chiselapp.com/ http://chiselapp.com/), which does actual hosting for Fossil projects. I see Fossil more as a VCS by itself.
rlpb 12y ago
How does this compare to GitLab, apart from the Mercurial support?
- ngoldbaum 12y ago
  Kallithea is community developed under a GPL v3 license. There is no corporate entity primarily in charge of Kallithea development, and there is no for-pay enterprise edition.
  - xavel 12y ago
    Is that argument supposed to be in favor of Kallithea? Because I don't see how it does, tbh.
    - mlinksva 12y ago
      Think of it in terms of free software identity politics, or free software deontological ethics. In these terms lack of a multi-stakeholder copyleft (or single stakeholder committed to free software) invites identity crisis or immoral behavior, and presence of an enterprise (ie proprietary) version is identity crisis and is immoral. Therefore in those terms, the argument you're replying to is in favor of Kallithea. If you're not thinking in those terms, the argument you're replying to might seem irrelevant, or even in favor of Gitlab, if eg you prefer a permissive license or the software you use to have a profitable business behind it. Maybe that's where you're coming from?
  - sytse 12y ago
    Just wanted to add that in principle the GitLab core team is in charge of GitLab development https://about.gitlab.com/core-team/ https://about.gitlab.com/core-team/ It is a bit theoretical since many core team members do work for GitLab B.V. (of which I'm CEO). By the way, does Kallithea have any features that are in GitLab Enterprise Edition but not in GitLab Community Edition?
    - rtz12 12y ago
      I somehow get the feeling that all you do is shilling for GitLab on HN.
abhishivsaxena 12y ago
Does anyone know an existing good way to version data rather than files? I know of datomic, but it has time as a dimension - EAVT. Would be interesting in some cases - financial data, content creation - to have both, the querying ability of databases as well as git style branching/merging. So for example blob = { id: 1, meta: { type: "paragraph" }} // so you can query by meta.type version1 = { content: "This is a example" } version2 = { content: "This is an example" } db.commit("master", blob.id, version1) db.get("master", blob.id) // { content: "This is a example" } db.commit("master", blob.id, version2) db.get("master", blob.id) // { content: "This is an example" }
- detaro 12y ago
  https://github.com/mirage/irmin https://github.com/mirage/irmin might be a candidate?
james_fairhurst 12y ago
Not great that on the homepage you're greeted with "IMPORTANT SECURITY NOTICE" with a massive security vulnerability in previous versions. Obv. that stuff happens but not a good start.
- rgj 12y ago
  Especislly since the real security is that you can apparently change your email address without a validation email being sent. All they did was add CSRF protection but this still is very bad practice.
- bcg1 12y ago
  Kallithea is a fork of an existing codebase (RhodeCode) ... so this is not exactly a "start", although to be fair I'm not sure if the issue on the homepage existed before the fork or was introduced afterwards. At least one other security issue was discovered and fixed that existed (exists?) in RhodeCode as well: https://kallithea-scm.org/security/cve-2015-0260.html https://kallithea-scm.org/security/cve-2015-0260.html At least they are quite upfront about the issues, and IMHO I'd rather see this kind of thing in a 0.1 version than a 1.0
  - james_fairhurst 12y ago
    Ah OK fair enough, yeah that's true I agree up front is always best. I was probably too harsh.
Jemaclus 12y ago
I've been building a toy git-like system for my own amusement, so this is a timely post. It'll be fun to read and see how it works and how it compares to my own.
- kasabali 12y ago
  this is not a git-like system, this is a code hosting solution similar to github/bitbucket.
  - Jemaclus 12y ago
    Oh. Hmm, I misunderstood then. Thanks for clearing that up.
pestaa 12y ago
Looks and feels very usable just from clicking around. I should mention, however, tweaking the colors a bit would have a huge impact, in my opinion.
hysan 12y ago
For the curious, this is an open source fork of RhodeCode starting from the last version before it went business source (so 1.7.2) that popped up in July 2014. It's nice to see that they are fixing a lot of bugs now instead of code cleanup resulting from forking. It would be nice to have an easy to find page of all the releases and changelogs though.

102 points by conductor 12y ago

This looks need but I much prefer gitbucket[0]. It has been the easiest to deploy and looks better then most things out there. 0 - https://github.com/takezoe/gitbucket https://github.com/takezoe/gitbucket

higherpurpose 12y ago
Even Gogs? http://gogs.io/ http://gogs.io/
- johnmaguire2013 12y ago
  Gogs is ridiculously simple. I recommend it.
  - georgealton 12y ago
    Thanks for the recommendation, will give it a go on my next project
- gravypod 12y ago
  No, but I have seen it linked around quite a few times. I still need to give it a try eventually. I'm a Java-guy myself so using GitBucket saves time. All of the VM/compiler requirements for building& hosting it are already on all of my servers. It also adds a safety net for myself: if I find a bug, I can fix it myself without too much hard work. It's just extremely convenient for my use cases. I've heard nothing but praise for Gogs, so I definitely want to give it a..... go some time. (I'm sorry, needed to make that pun). Edit: Fixed spelling.
  - atomical 12y ago
    You can cross compile gogs locally and deploy the binary.
SwellJoe 12y ago
Am I wrong for wondering why this is hosted at github, if it is effectively the same sort of tool?
- Nullabillity 12y ago
  Probably because github is free, while custom hosting can get expensive.
- scott_karana 12y ago
  Lowers the barrier to contribution, because Github users can then see, communicate with, and contribute to it before fully committing.
jordigh 12y ago
The biggest reason for Kallithea to exist is that it does Mercurial. It really is the only self-hosted "hub" (edit: free) software that does it.
- anton_gogolev 12y ago
  Shameless plug: HgLab[0] supports Mercurial as well. [0]: https://hglabhq.com https://hglabhq.com
  - jordigh 12y ago
    Right, sorry, I have amended: Kallithea is the only free "hub" software for Mercurial.
- neandrake 12y ago
  I did some semi-extensive research to find something to use in-house for our mercurial repositories (with potential to switching to Git because so much more is available). I went with Phabricator which also supports mercurial and is free to setup in-house. It's quite a spectacular product, I recommend checking it out. Kallithea needed an update (especially for UI), but the capabilities and the look&feel of Phabricator make it very useful. https://www.phabricator.org https://www.phabricator.org

reitanqild 12y ago

Anybody knows how this compare to fossil?

mlinksva 12y ago
They're both free software dvcs hosting web applications, but beyond that everything is different: git,hg...fossil no issue tracking...distributed issue tracking python...c gplv3...2 clause BSD
- isxek 12y ago
  I'd say it would be better to compare Kallithea with Chisel (http://chiselapp.com/ http://chiselapp.com/), which does actual hosting for Fossil projects. I see Fossil more as a VCS by itself.

rlpb 12y ago

How does this compare to GitLab, apart from the Mercurial support?

ngoldbaum 12y ago
Kallithea is community developed under a GPL v3 license. There is no corporate entity primarily in charge of Kallithea development, and there is no for-pay enterprise edition.
- xavel 12y ago
  Is that argument supposed to be in favor of Kallithea? Because I don't see how it does, tbh.
  - mlinksva 12y ago
    Think of it in terms of free software identity politics, or free software deontological ethics. In these terms lack of a multi-stakeholder copyleft (or single stakeholder committed to free software) invites identity crisis or immoral behavior, and presence of an enterprise (ie proprietary) version is identity crisis and is immoral. Therefore in those terms, the argument you're replying to is in favor of Kallithea. If you're not thinking in those terms, the argument you're replying to might seem irrelevant, or even in favor of Gitlab, if eg you prefer a permissive license or the software you use to have a profitable business behind it. Maybe that's where you're coming from?
- sytse 12y ago
  Just wanted to add that in principle the GitLab core team is in charge of GitLab development https://about.gitlab.com/core-team/ https://about.gitlab.com/core-team/ It is a bit theoretical since many core team members do work for GitLab B.V. (of which I'm CEO). By the way, does Kallithea have any features that are in GitLab Enterprise Edition but not in GitLab Community Edition?
  - rtz12 12y ago
    I somehow get the feeling that all you do is shilling for GitLab on HN.

abhishivsaxena 12y ago

Does anyone know an existing good way to version data rather than files? I know of datomic, but it has time as a dimension - EAVT. Would be interesting in some cases - financial data, content creation - to have both, the querying ability of databases as well as git style branching/merging. So for example blob = { id: 1, meta: { type: "paragraph" }} // so you can query by meta.type version1 = { content: "This is a example" } version2 = { content: "This is an example" } db.commit("master", blob.id, version1) db.get("master", blob.id) // { content: "This is a example" } db.commit("master", blob.id, version2) db.get("master", blob.id) // { content: "This is an example" }

detaro 12y ago
https://github.com/mirage/irmin https://github.com/mirage/irmin might be a candidate?

james_fairhurst 12y ago

Not great that on the homepage you're greeted with "IMPORTANT SECURITY NOTICE" with a massive security vulnerability in previous versions. Obv. that stuff happens but not a good start.

rgj 12y ago
Especislly since the real security is that you can apparently change your email address without a validation email being sent. All they did was add CSRF protection but this still is very bad practice.
bcg1 12y ago
Kallithea is a fork of an existing codebase (RhodeCode) ... so this is not exactly a "start", although to be fair I'm not sure if the issue on the homepage existed before the fork or was introduced afterwards. At least one other security issue was discovered and fixed that existed (exists?) in RhodeCode as well: https://kallithea-scm.org/security/cve-2015-0260.html https://kallithea-scm.org/security/cve-2015-0260.html At least they are quite upfront about the issues, and IMHO I'd rather see this kind of thing in a 0.1 version than a 1.0
- james_fairhurst 12y ago
  Ah OK fair enough, yeah that's true I agree up front is always best. I was probably too harsh.

Jemaclus 12y ago

I've been building a toy git-like system for my own amusement, so this is a timely post. It'll be fun to read and see how it works and how it compares to my own.

kasabali 12y ago
this is not a git-like system, this is a code hosting solution similar to github/bitbucket.
- Jemaclus 12y ago
  Oh. Hmm, I misunderstood then. Thanks for clearing that up.

pestaa 12y ago

Looks and feels very usable just from clicking around. I should mention, however, tweaking the colors a bit would have a huge impact, in my opinion.

hysan 12y ago

For the curious, this is an open source fork of RhodeCode starting from the last version before it went business source (so 1.7.2) that popped up in July 2014. It's nice to see that they are fixing a lot of bugs now instead of code cleanup resulting from forking. It would be nice to have an easy to find page of all the releases and changelogs though.