GitLab

Linux: export GITLAB_HOME=/srv/gitlab

MacOS: export GITLAB_HOME=$HOME/gitlab

Local location	Container location	Usage
$GITLAB_HOME/gitlab13/data	/var/opt/gitlab	Application data
$GITLAB_HOME/gitlab13/logs	/var/log/gitlab	Application Logs
$GITLAB_HOME/gitlab13/config	/etc/gitlab	GitLab configuration

docker run -it --rm \
--publish 9050:80 \
--publish 4321:22 \
--publish 4430:443 \
gitlab/gitlab-ce:13.2.3-ce.0 \
bin/bash
id; exit

mkdir -p $GITLAB_HOME/gitlab13/{config,data,logs}
#chown -R 0:0 $GITLAB_HOME/gitlab13/

PostgreSQL

cat << DDL | psql -U ${USER}
CREATE DATABASE gitlab;
-- DROP DATABASE IF EXISTS gitlab;
CREATE USER gitlab WITH ENCRYPTED PASSWORD 'sadaqah!';
GRANT ALL PRIVILEGES ON DATABASE     gitlab TO gitlab;
DDL

Docker

Debian

sudo docker run --detach \
--hostname cdn.chorke.org \
--env GITLAB_OMNIBUS_CONFIG="external_url 'https://cdn.chorke.org/gitlab'; gitlab_rails['lfs_enabled'] = true;" \
--publish 4430:443 \
--publish 9050:80 \
--publish 4321:22 \
--name gitlab \
--shm-size 256m \
--restart always \
--volume $GITLAB_HOME/gitlab13/config:/etc/gitlab \
--volume $GITLAB_HOME/gitlab13/logs:/var/log/gitlab \
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab \
gitlab/gitlab-ce:13.2.3-ce.0

Fedora

sudo docker run --detach \
--hostname cdn.chorke.org \
--env GITLAB_OMNIBUS_CONFIG="external_url 'https://cdn.chorke.org/gitlab'; gitlab_rails['lfs_enabled'] = true;" \
--publish 4430:443 \
--publish 9050:80 \
--publish 4321:22 \
--name gitlab \
--shm-size 256m \
--restart always \
--volume $GITLAB_HOME/gitlab13/config:/etc/gitlab:Z \
--volume $GITLAB_HOME/gitlab13/logs:/var/log/gitlab:Z \
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab:Z \
gitlab/gitlab-ce:13.2.3-ce.0

Mailer

docker exec -it gitlab vim /etc/gitlab/gitlab.rb

gitlab_rails['smtp_enable'] = true
gitlab_rails['smtp_address'] = "mail.chorke.org"
gitlab_rails['smtp_port'] = 25
gitlab_rails['smtp_user_name'] = "[email protected]"
gitlab_rails['smtp_password'] = "p@$$w0rd"
gitlab_rails['smtp_domain'] = "mail.chorke.org"
gitlab_rails['smtp_authentication'] = "login"
gitlab_rails['smtp_enable_starttls_auto'] = false
gitlab_rails['smtp_tls'] = false

docker exec -it gitlab vim /etc/gitlab/gitlab.rb

gitlab_rails['smtp_openssl_verify_mode'] = 'none'

docker exec -it gitlab vim /etc/gitlab/gitlab.rb

gitlab_rails['gitlab_email_enabled'] = true

##! If your SMTP server does not like the default 'From: [email protected]'
##! can change the 'From' with this setting.
gitlab_rails['gitlab_email_from'] = '[email protected]'
gitlab_rails['gitlab_email_display_name'] = 'GitLab'
gitlab_rails['gitlab_email_reply_to'] = '[email protected]'
gitlab_rails['gitlab_email_subject_suffix'] = 'GitLab'

Apache

CentOS 7

vim /etc/httpd/conf.sites.d/00-cdn.chorke.org-le-ssl.conf

<IfModule mod_ssl.c>
<VirtualHost *:443>
    SSLProxyEngine On
    ProxyRequests Off
    SSLProxyVerify None
    ProxyPreserveHost On
    AllowEncodedSlashes On
    SSLProxyCheckPeerCN Off
    SSLProxyCheckPeerName Off
    SSLProxyCheckPeerExpire Off
    #....misc apache cfg....

    <Location /gitlab>
        Order Allow,Deny
        Allow from all
        ProxyPass https://localhost:4430/gitlab nocanon
        ProxyPassReverse https://localhost:4430/gitlab
    </Location>

    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateFile /etc/letsencrypt/live/cdn.chorke.org/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/cdn.chorke.org/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/cdn.chorke.org/chain.pem
</VirtualHost>
</IfModule>

Runner

docker pull gitlab/gitlab-runner:latest
docker pull gitlab/gitlab-runner:alpine

Debian

docker run --detach \
--name gitlab-runner \
--restart always \
--volume /var/run/docker.sock:/var/run/docker.sock \
--volume /srv/gitlab-runner/config:/etc/gitlab-runner \
gitlab/gitlab-runner:latest

CentOS

docker run --detach \
--name gitlab-runner \
--restart always \
--volume /var/run/docker.sock:/var/run/docker.sock \
--volume /srv/gitlab-runner/config:/etc/gitlab-runner:Z \
gitlab/gitlab-runner:v13.2.2

MacOS

brew install gitlab-runner
brew services start gitlab-runner
brew services stop gitlab-runner

Raspbian

cat <<EOF >> /etc/apt/sources.list.d/gitlab_raspberry-pi2.list
deb https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main
deb-src https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main
EOF

wget -qO - https://packages.gitlab.com/gitlab/raspberry-pi2/gpgkey|apt-key add -
apt update;apt list --upgradable;apt search gitlab-ce

# pios swap memory
printf '\nbefore:\n';free -th;\
sed -i "s|CONF_SWAPSIZE=100|CONF_SWAPSIZE=2048|" /etc/dphys-swapfile;\
service dphys-swapfile restart;\
printf '\nupdate:\n';free -th

---

GIT_FILE_CFG='/etc/gitlab/gitlab.rb';\
GIT_XTRN_URL_FIND="external_url 'http://gitlab.example.com'";\
GIT_XTRN_URL_FILL="external_url 'https://cdn.chorke.org/gitlab'";\
sed -i "s|$GIT_XTRN_URL_FIND|$GIT_XTRN_URL_FILL|" "$GIT_FILE_CFG"

32 external_url 'http://gitlab.example.com' ──────────────────────────────────────────────────────────────── 113 # gitlab_rails['gitlab_default_can_create_group'] = true 114 # gitlab_rails['gitlab_username_changing_enabled'] = true ──────────────────────────────────────────────────────────────── 128 # gitlab_rails['gitlab_default_theme'] = 2 ──────────────────────────────────────────────────────────────── 344 # gitlab_rails['lfs_enabled'] = true ──────────────────────────────────────────────────────────────── 548 # gitlab_rails['gitlab_shell_ssh_port'] = 22 ──────────────────────────────────────────────────────────────── 583 # git_data_dirs({ 584 # "default" => { 585 # "path" => "/mnt/nfs-01/git-data" 586 # } 587 # }) ──────────────────────────────────────────────────────────────── 920 # puma['worker_processes'] = 2 ──────────────────────────────────────────────────────────────── 959 # sidekiq['max_concurrency'] = 50 ──────────────────────────────────────────────────────────────── 1894 # prometheus_monitoring['enable'] = true

external_url 'https://cdn.chorke.org/gitlab' ──────────────────────────────────────────────────────────────── gitlab_rails['gitlab_default_can_create_group'] = false gitlab_rails['gitlab_username_changing_enabled'] = false ──────────────────────────────────────────────────────────────── gitlab_rails['gitlab_default_theme'] = 5 ──────────────────────────────────────────────────────────────── gitlab_rails['lfs_enabled'] = true ──────────────────────────────────────────────────────────────── gitlab_rails['gitlab_shell_ssh_port'] = 4321 ──────────────────────────────────────────────────────────────── git_data_dirs({ "default" => { "path" => "/chorke/academia/nfs/gitlab/git-data" } }) ──────────────────────────────────────────────────────────────── puma['worker_processes'] = 2 ──────────────────────────────────────────────────────────────── sidekiq['max_concurrency'] = 9 ──────────────────────────────────────────────────────────────── prometheus_monitoring['enable'] = false

nano /etc/gitlab/gitlab.rb ──────────────────────────────────────────────────────────────── gitlab-ctl reconfigure gitlab-ctl status gitlab-ctl stop

nano /etc/gitlab/gitlab.rb ──────────────────────────────────────────────────────────────── gitlab-ctl reconfigure service gitlab restart service gitlab status

---

nano /etc/ssh/sshd_config

13 #Port 22 ──────────────────────────────────────────────────────────────── telnet localhost 4321 systemctl restart sshd ssh -P4321 [email protected]

Port 4321 ──────────────────────────────────────────────────────────────── systemctl status sshd telnet git0.dev.shahed.biz 4321 ssh -P4321 [email protected]

Upgrade

from 13.6.3-ce.0:
sudo apt install gitlab-ce=13.8.8-ce.0
sudo apt install gitlab-ce=13.12.15-ce.0
sudo apt install gitlab-ce=14.0.11-ce.0
sudo apt install gitlab-ce=14.1.8-ce.0
sudo apt install gitlab-ce=14.2.6-ce.0
from 14.7.1-ce.0:
sudo gitlab-ctl reconfigure
sudo gitlab-ctl restart

Knowledge

SSH Local Forwarding:
ssh -L 9050:localhost:9050 [email protected]
http://localhost:9050/
user: root
pass: 5iveL!fe

Sign-up Restrictions:
https://cdn.chorke.org/gitlab/admin/application_settings/general
Sign-up enabled (Unchecked)

docker logs gitlab
docker restart gitlab
docker exec -it gitlab /bin/bash
docker exec gitlab update-permissions
docker exec -it gitlab vim /etc/gitlab/gitlab.rb

docker logs gitlab-runner
docker restart gitlab-runner
docker exec -it gitlab-runner gitlab-runner --help
docker exec -it gitlab-runner gitlab-runner register

docker exec -it gitlab-runner gitlab-runner list
docker exec -it gitlab-runner gitlab-runner verify
docker exec -it gitlab-runner gitlab-runner verify --delete

docker-machine create --driver virtualbox default
docker-machine start default
docker-machine stop default
docker-machine ip default
docker-machine ls

---

docker exec -it gitlab gitlab-rails console -e production
user = User.where(id: 1).first
user.password = 'academia'
user.password_confirmation = 'academia'
user.save

---

lsblk
fdisk -l
smartctl -a /dev/sda
e2label /dev/sda1 CK10010100
mkfs.ext4 /dev/sda1 -L CK10010100
mkdir /chorke/academia/nfs/gitlab
chown pi /chorke/academia/nfs/gitlab
mount /dev/sda1 /chorke/academia/nfs/gitlab

---

SELinux:
https://docs.gitlab.com/runner/install/docker.html#selinux
https://github.com/dpw/selinux-dockersock

curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.deb.sh | sudo bash
curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash
curl -s https://packages.gitlab.com/install/repositories/gitlab/raspberry-pi2/script.deb.sh | sudo bash

References

Setup Apache2 as Reverse Proxy for Nginx Backing up and restoring GitLab Omnibus GitLab Docker Source Enable relative URL in GitLab GitLab CE Docker Image GitLab Docker Image Package information Package Licensing Enable HTTPS SMTP settings	Run GitLab Runner in a container GitLab Configuration Settings GitLab Runner commands GitLab Database Settings GitLab Runner on macOS GitLab Maven Repository GitLab Runner Executors Installation instructions GitLab SMTP Settings Registering Runners	SSL Handshake error with remote server Docker Machine vs. Docker Engine Getting Start Docker Machine Docker Machine Overview Docker Machine Executor Install Docker Machine Kubernetes Executor Docker Executor Shell Executor SSH Executor
GitLab 13.0 runs on Puma instead of Unicorn HDD partition naming convention in Linux Difference between /mnt vs /media Setup XCode Configuration YouTube GitLab Repository for Raspberry Pi OS GitLab Install on a Raspberry Pi OS Monitoring GitLab with Prometheus Support running GitLab on ARM64 Best Linux Files System for SSD Convention for HDD Label	GitLab upgrade to latest minor version Using a non-bundled web-server Configure GitLab with Apache2 GitLab Community Sign In Upgrading GitLab Drone Pipeline Raspberry Pi HAProxy Nginx Drone	GitLab » Docker » Compose GitLab » Telegram GitLab » Upgrade