I am looking for recommendations for an open source self-hosted version control system source code hosting service. I found a few, but I can’t decide on which one to pick:

If there’s a better one than the ones I’ve listed here, I’d love to hear about it!

I care primarily about privacy and security, if that makes any difference.

  • DragonBard@ttrpg.network
    link
    fedilink
    English
    arrow-up
    1
    ·
    46 minutes ago

    If you are not wed to git, and are willing to try something else, why not give Fossil SCM a try. It’s created and maintained by the creator of SQLite. It’s a single executable that provides everything for modern source code management, including a website, and even has an official docker file that just works.

    Issue tracking, forum support, email, it’s all there, in a single executable that can serve as both the front and back end depending on how you launch it. And it’s a smaller install than git by itself.

  • thirdBreakfast@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    3 hours ago

    Forgejo - actively developed open source. It’s what powers Codeberg. Easy to set up and manage with Docker. I moved to it from Gogs and skipped Gitea after reading about the forks.

  • shiftymccool@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 hours ago

    I use Forgejo mostly for code archiving but anything that requires CI/CD, like personal code projects, i use OneDev. No extra setup for pipeline, batteries included

  • NebulaNymph@programming.dev
    link
    fedilink
    English
    arrow-up
    12
    ·
    7 hours ago

    +1 for Forgejo!

    Just set it up with Docker this past week, it was fairly straightforward and has been working well since

  • 56!@lemmy.ml
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    5 hours ago

    Those 3 are all fairly similar. Here are some others I can think of:

    • Gitlab: many features, complex, pr workflow.
    • Forgejo / Gogs: simpler, github inspired interface, pr workflow.
    • Radicle: peer to peer, idk much more…
    • Sourcehut: minimal (non-github) interface, very modular, email workflow.
    • Cgit / Gitweb / etc.: just a git interface, no specific workflow.

     

    If you’re not using any of the additional features, cgit should be enough. If you’re planning on collaborating with others, probably Forgejo would be better.

    You can also use individual components of sourcehut, if you want a git web interface with just issue tracking, ci, or wiki, for example.

    • sun@slrpnk.net
      link
      fedilink
      English
      arrow-up
      1
      ·
      4 hours ago

      A pro of Sourcehut is that EVERYTHING can be done by email. So, if you use their issue tracker and want other people to be able to submit issues, they can do it without making an account.

  • darkan15@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    8 hours ago

    Used Gitea for a while, and decided to switch to Forgejo before the hard fork split (no more code from Gitea), been using it since, In my opinion both work well, but prefer Forgejo.

  • AbidanYre@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    ·
    11 hours ago

    Gogs is the original. Gitea is a fork because the dev of Gogs wasn’t taking community input (I think that was the reasoning behind it). Forgejo is a fork of gitea because some folks didn’t like gitea forming a for profit corporation (Or something to that effect).

    As far as day to day use they’re all fairly similar, though it’s been a long time since I used Gogs.

    • Norah (pup/it/she)@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      13
      ·
      9 hours ago

      It’s not just the for-profit corporation, there’s also governance issues. Basically, the community elected certain positions and then had the rug pulled out from them such that no elections would be held again.

      In the name of the Gitea Community who elected you last year, we welcome the creation of a for-profit company that allows you to make a living out of Gitea.

      […]

      We believed you when you promised to pass along the ownership of the Gitea project to your elected successors. This promise is part of an essential bond between you and the strong Community of volunteers, as well as all those who rely upon our collective efforts.

      With that in mind, you can understand our surprise when we learned on October 25th, 2022 that both the domains and the trademark were transferred to a for-profit company without our knowledge or approval.

      Source.

    • marcos@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      10 hours ago

      IMO, the Gogs dev was correct. If you look at that community input and what Gitea became, I was glad to use the version that rejected it.

      But I don’t know how it compares with Forgejo.

  • i_am_not_a_robot@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    7
    ·
    9 hours ago

    You’re missing GitLab. I’d be looking at GitLab or Forgejo.

    But you might not need this. When you access a private Git repository, you’re normally connecting over SSH and authenticating using SSH keys. By default, if you have Git installed on a server you can SSH to and you have a Git repository on that server in a location you can access, you can use that server as a Git remote. You only really want one these services if you want the CI pipelines or collaboration tools.

    • Arigion@feddit.org
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 hours ago

      This is not true. There are lots of places where ssh/vpn is blocked by a firewall while https usually is allowed. So if you want to access/push code while travelling it might be really helpful to have https access to the repo. That was the only reason for me to set up gitlab years ago.

    • vividspecter@aussie.zone
      link
      fedilink
      English
      arrow-up
      7
      ·
      9 hours ago

      Having a web UI is useful even if you’re not using the extra tools. Not mandatory of course, but nice.

      • 7EP6vuI@feddit.org
        link
        fedilink
        English
        arrow-up
        4
        ·
        6 hours ago

        maybe the installation is simple, but the whole thing is still a beast and has tons of different services and does a lot of stuff. i prefer forgejo because of it’s simplicity (still not super easy) and it takes less resources.

        • justme@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          5 hours ago

          I used it for a while. It eats up half your server just by existing ^^is a good system for the time, but now we have better alternatives.

  • tal@lemmy.today
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    1
    ·
    11 hours ago

    The things you’re describing aren’t really version control systems themselves. Git is a version control system; these are an ecosystem of web-based tools surrounding that version control system.

    I don’t know if there’s a good term for these.

    kagis

    Wikipedia calls them “forges”:

    https://en.wikipedia.org/wiki/Forge_(software)

    In free and open-source software (FOSS) development communities, a forge is a web-based collaborative software platform for both developing and sharing computer applications.

    For software developers it is an online service to host the tools they need to work and communicate with their coworkers. It provides a workflow to propose modifications and engage in discussions. The goal is to reach an agreement that will allow these modifications to be merged into the software repository.

    For users, a forge is a repository of computer applications, a place where bugs can be reported, a channel to be informed of security issues, etc.

    The source code itself is stored in a revision control system and linked to a wide range of services such as a code review, bug database, continuous integration, etc. When a development community forks, it duplicates the content of the forge and is then able to modify it without asking permission. A community may rely on services scattered on multiple forges: they are not necessarily hosted under the same domain.

    • whatwhatwhatwhat@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      9 hours ago

      Sorry for the off-topic question, but this has been driving me crazy.

      Is “kagis” the verb for using the search engine “kagi”? For the longest time I’ve been interpreting it as a “dejected sigh” emotional expression.

    • The 8232 Project@lemmy.mlOP
      link
      fedilink
      English
      arrow-up
      4
      ·
      10 hours ago

      I guess it would be more akin to a “source code hosting service,” but that would imply that I intend to open it to the internet (which isn’t necessarily the case).