What I like with gitolite is that once it's run, you can create a new repository with custom permissions with only one commit in the "admin" repository. It is also not necessary to create users for your git users.
I have always placed my git servers in BSD jails to minimise the worry, but you penguins have no such option!
Penguins have LXC, which is comparable to BSD jails or Solaris containers.