Apache Subversion (SVN) on Ubuntu 24.04
by cloudimg
Apache Subversion (SVN) on Ubuntu 24.04, HTTPS version control with mandatory per-VM auth
Apache Subversion (SVN) is the enterprise centralised version-control system from the Apache Software Foundation. It keeps a single authoritative repository with a complete, ordered history of every change, and lets teams check out a working copy, commit revisions, branch and tag, and roll back to any earlier state. Because history and access control live on the server rather than in every clone, Subversion remains a natural fit for large binary assets, fine-grained path-based permissions and organisations that want one governed source of truth. This cloudimg image runs Subversion 1.14 on Ubuntu 24.04 LTS, ready to use on first boot.
The repository is served over HTTPS by Apache httpd and mod_dav_svn at the path /svn/repo, so any standard svn client can check out and commit over the network. A single FSFS repository is created empty and ready for its first commit. An unauthenticated health endpoint is provided for load-balancer and probe checks, while every repository path requires authentication.
Security is built in. There is no default or shared credential in the image: on first boot every VM generates a unique repository password for the cloudimg user and a self-signed TLS certificate. The password is stored as a bcrypt hash in Apache's authentication file and the plaintext is written only to a root-only file for the operator. Authentication is mandatory on every path, so anonymous and wrong-credential requests are rejected with HTTP 401 and there is no anonymous read or write. For production you can replace the self-signed certificate with a CA-signed one and add further repository users or per-path permissions with a quick configuration change.
Subversion is distributed under the Apache License 2.0, free and open source with no per-CPU or per-deployment fee. cloudimg is not affiliated with or endorsed by the Apache Software Foundation. cloudimg provides packaging, per-instance credential and certificate automation, a secure default configuration, security patching, and 24/7 support with a guaranteed 24-hour response SLA.