Private Gem Server

This gem provides a Gem in a Box implementation that pulls gems from git sources, and builds them, whenever a client requests a list of gems.

gem install private-gem-server

The gem comes with the private-gem-server executable, which wraps the thin executable. It takes exactly the same command-line arguments as the Thin web server. Run thin -h to see them.

sudo private-gem-server -p 80 start

Customize this gem using environment variables:

The directory in which gems (and other working files) should be stored.

Path of a log file to which the server should write.

Path of a YAML file containing a list of gems to be served.

Note: In order for gems to be discovered, they must be git tagged and that tag needs to match the gem version e.g. "git tag v1.2.5"

Here's an example sources file:

keys:
  my_private_key: |
    -----BEGIN RSA PRIVATE KEY-----
    MIIEpAIBAAKCAQEA1Wdr4g6o62CwrNFcyVc4dQi3mrQbffhceXHD6NtnfjtrFZ7K
    XKNh33X1c42D/THIS/WOULD/BE/MUCH/LONGER/IF/IT/WERE/REAL/dynzKCoLb
    JwyMC+KerlXfxDSCWzE6z7bcA38dXn3hwnbokowZro40mo/NTwqY6Q==
    -----END RSA PRIVATE KEY-----
    
gems:
  "secret-component":
    type: git
    url: git@github.com:hx/secret-component
    key: my_private_key
  
  "very-secret-component":
    type: git
    url: git@github.com:hx/very-secret-component
    key: my_private_key

For now, git is the only supported source. Others will come.

• This is a premature gem with no test coverage. Don't use it.