在 http 传输中使用带有 git 的袜子代理

如何让 git 使用袜子代理进行 HTTP 传输？

我成功地使用 GIT _ PROXY _ COMMAND 配置了 GIT，以使用袜子代理进行 GIT 传输。

此外，我已经配置了我的。Curlrc 文件来定义袜子代理，我可以用 curl 命令直接获取信息，比如:

curl http://git.kernel.org/pub/scm/git/git.git/info/refs?service=git-upload-pack

但是如何使用带有 git 的袜子代理来使用 HTTP 传输协议检索数据，比如:

git clone http://git.kernel.org/pub/scm/git
89816 次浏览
小开

Note: the patch here was applied to git in 2015 for version 2.4.11. Since that time you can just use socks:// urls with the http.proxy configuration settings.

For the git:// protocol we have Using Git with a SOCKS proxy. However, it appears that git does not properly support socks proxies. git itself is linked to libcurl. So the .curlrc file is not used (that is just for the curl command line client). However, the following patch provides the necessary support. With this patch applied to git we can simply set the ALL_PROXY environment variable or HTTP_PROXY or HTTPS_PROXY to socks://hostname:portnum (or socks4/socks5) or indeed the http.proxy git config setting and libcurl will now actually use the socks protocol when using the proxy.

For example, an active trace:

$ GIT_CURL_VERBOSE=1 bin-wrappers/git -c "http.proxy=socks://localhost:1080" ls-remote http://github.com/patthoyts/tclftd2xx.git
* Couldn't find host github.com in the _netrc file; using defaults
* About to connect() to proxy localhost port 1080 (#0)
*   Trying 127.0.0.1...
* connected
* SOCKS4 request granted.
* Connected to localhost (127.0.0.1) port 1080 (#0)
> GET /patthoyts/tclftd2xx.git/info/refs?service=git-upload-pack HTTP/1.1
User-Agent: git/1.8.1.msysgit.1.dirty
... and on to a successful request ...

The necessary patch:

diff --git a/http.c b/http.c
index 3b312a8..f34cc75 100644
--- a/http.c
+++ b/http.c
@@ -322,6 +322,14 @@ static CURL *get_curl_handle(void)
if (curl_http_proxy) {
curl_easy_setopt(result, CURLOPT_PROXY, curl_http_proxy);
curl_easy_setopt(result, CURLOPT_PROXYAUTH, CURLAUTH_ANY);
+#if LIBCURL_VERSION_NUM >= 0x071800
+               if (!strncmp("socks5", curl_http_proxy, 6))
+                       curl_easy_setopt(result, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);
+               else if (!strncmp("socks4a", curl_http_proxy, 7))
+                       curl_easy_setopt(result, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS4A);
+               else if (!strncmp("socks", curl_http_proxy, 5))
+                       curl_easy_setopt(result, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS4);
+#endif
}


return result;
小开

I tested with Git 1.8.2 and SOCKS v5 proxy, following setting works for me:

git config --global http.proxy 'socks5://127.0.0.1:7070'

UPDATE 2017-3-31:

According to the document, despite the name http.proxy, it should work for both HTTP and HTTPS repository urls. Thanks @user for pointing out this.

UPDATE 2018-11-27:

To disable the proxy, run command:

git config --global --unset http.proxy

EDIT 2019-03-04:

If you also want the host name to be resolved using the proxy, use thuzhf's solution below, which uses socks5h instead of socks5

小开

I use the following command to clone a specific repository from socks5 proxy. The proxy settings are specified with --config option.

$ git clone https://github.com/xxxxx --config 'http.proxy=socks5://127.0.0.1:1234'
小开

If you do not want to set the proxy as global config, try ALL_PROXY= e.g.:

$ ALL_PROXY=socks5://127.0.0.1:8888 git clone https://github.com/some/one.git
小开

(Just a little reminder) If you want the hostname also be resolved by the proxy (that means passing everything through the proxy), especially when you are cloning a gist, you can use the following setting (the key is that it uses socks5h instead of socks5):

git config --global http.proxy socks5h://127.0.0.1:1080
小开

Just in reference to @briankip and removing the http proxy setting as Yang.Y mentioned you can directly edit the ini file.

You can also do this on the command line using

git config --global --unset http.proxy

To confirm it has been removed list the current configuration using

git config --list

小开

None of the suggested methods worked for me, so I found another approach as the following instruction:

  1. Make a tunnel (dynamic port forwarding) over SOCKS5 protocol using ssh:
    ssh -ND 9994 user@YourSshServer
  1. Install proxychains on your localhost, not the ssh server you're connected to:
  1. Edit your proxychains configure file:
    sudo nano /etc/proxychains.conf then add the following line at the end of file:
    socks5 127.0.0.1 9994
  1. Now we are ready to do a git command (proxychains must be placed before the command):
    proxychains git push origin develop
小开

None of the above worked for me unfortunately, however this did:

nano ~/.ssh/config

Add:

Host my-host.foo.bar.com
ProxyJump username@host.local

Where 'host.local' is a vanilla mac with 'remote login enabled' in the sharing settings. Worked for me :)


提交答案