GitLab: Difference between revisions
Jump to navigation
Jump to search
Line 179: | Line 179: | ||
| valign="top" | | | valign="top" | | ||
<source lang="ruby"> | <source lang="ruby"> | ||
32 external_url 'http://gitlab.example.com' | |||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
88 # gitlab_rails['gitlab_default_can_create_group'] = true | |||
89 # gitlab_rails['gitlab_username_changing_enabled'] = true | |||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
103 # gitlab_rails['gitlab_default_theme'] = 2 | 103 # gitlab_rails['gitlab_default_theme'] = 2 | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
315 # gitlab_rails['lfs_enabled'] = true | 315 # gitlab_rails['lfs_enabled'] = true | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
530 # git_data_dirs({ | 530 # git_data_dirs({ | ||
531 # "default" => { | 531 # "default" => { | ||
532 # "path" => "/mnt/nfs-01/git-data" | 532 # "path" => "/mnt/nfs-01/git-data" | ||
533 # } | 533 # } | ||
534 # }) | 534 # }) | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
879 # puma['worker_processes'] = 2 | 879 # puma['worker_processes'] = 2 | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
916 # sidekiq['max_concurrency'] = 50 | 916 # sidekiq['max_concurrency'] = 50 | ||
──────────────────────────────────────────────────────────────── | |||
1810 # prometheus_monitoring['enable'] = true | |||
</source> | </source> | ||
Line 219: | Line 221: | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
sidekiq['max_concurrency'] = 9 | sidekiq['max_concurrency'] = 9 | ||
──────────────────────────────────────────────────────────────── | |||
prometheus_monitoring['enable'] = false | |||
</source> | </source> | ||
|} | |} |
Revision as of 02:34, 18 September 2020
Linux: export GITLAB_HOME=/srv/gitlab |
MacOS: export GITLAB_HOME=$HOME/gitlab |
Local location | Container location | Usage |
---|---|---|
$GITLAB_HOME/gitlab13/data |
/var/opt/gitlab |
Application data |
$GITLAB_HOME/gitlab13/logs |
/var/log/gitlab |
Application Logs |
$GITLAB_HOME/gitlab13/config |
/etc/gitlab |
GitLab configuration |
docker run -it --rm \
--publish 9050:80 \
--publish 4321:22 \
--publish 4430:443 \
gitlab/gitlab-ce:13.2.3-ce.0 \
bin/bash
id; exit
mkdir -p $GITLAB_HOME/gitlab13/{config,data,logs}
#chown -R 0:0 $GITLAB_HOME/gitlab13/
Docker
Debian
docker run --detach \
--hostname cdn.chorke.org \
--env GITLAB_OMNIBUS_CONFIG="external_url 'https://cdn.chorke.org/gitlab'; gitlab_rails['lfs_enabled'] = true;" \
--publish 4430:443 \
--publish 9050:80 \
--publish 4321:22 \
--name gitlab \
--restart always \
--volume $GITLAB_HOME/gitlab13/config:/etc/gitlab \
--volume $GITLAB_HOME/gitlab13/logs:/var/log/gitlab \
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab \
gitlab/gitlab-ce:13.2.3-ce.0
CentOS
docker run --detach \
--hostname cdn.chorke.org \
--env GITLAB_OMNIBUS_CONFIG="external_url 'https://cdn.chorke.org/gitlab'; gitlab_rails['lfs_enabled'] = true;" \
--publish 4430:443 \
--publish 9050:80 \
--publish 4321:22 \
--name gitlab \
--restart always \
--volume $GITLAB_HOME/gitlab13/config:/etc/gitlab:Z \
--volume $GITLAB_HOME/gitlab13/logs:/var/log/gitlab:Z \
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab:Z \
gitlab/gitlab-ce:13.2.3-ce.0
Mailer
docker exec -it gitlab vim /etc/gitlab/gitlab.rb
gitlab_rails['gitlab_email_enabled'] = true
gitlab_rails['gitlab_email_from'] = '[email protected]'
gitlab_rails['gitlab_email_display_name'] = 'GitLab'
gitlab_rails['gitlab_email_reply_to'] = '[email protected]'
gitlab_rails['gitlab_email_subject_suffix'] = 'GitLab'
docker exec -it gitlab vim /etc/gitlab/gitlab.rb
gitlab_rails['smtp_enable'] = true
gitlab_rails['smtp_address'] = "mail.chorke.org"
gitlab_rails['smtp_port'] = 25
gitlab_rails['smtp_user_name'] = "[email protected]"
gitlab_rails['smtp_password'] = "p@$$w0rd"
gitlab_rails['smtp_domain'] = "mail.chorke.org"
gitlab_rails['smtp_authentication'] = "login"
gitlab_rails['smtp_enable_starttls_auto'] = false
gitlab_rails['smtp_tls'] = false
docker exec -it gitlab vim /etc/gitlab/gitlab.rb
gitlab_rails['smtp_openssl_verify_mode'] = 'none'
Apache
CentOS 7
vim /etc/httpd/conf.sites.d/00-cdn.chorke.org-le-ssl.conf
<IfModule mod_ssl.c>
<VirtualHost *:443>
SSLProxyEngine On
ProxyRequests Off
SSLProxyVerify None
ProxyPreserveHost On
AllowEncodedSlashes On
SSLProxyCheckPeerCN Off
SSLProxyCheckPeerName Off
SSLProxyCheckPeerExpire Off
#....misc apache cfg....
<Location /gitlab>
Order Allow,Deny
Allow from all
ProxyPass https://localhost:4430/gitlab nocanon
ProxyPassReverse https://localhost:4430/gitlab
</Location>
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/cdn.chorke.org/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/cdn.chorke.org/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/cdn.chorke.org/chain.pem
</VirtualHost>
</IfModule>
Runner
docker pull gitlab/gitlab-runner:latest docker pull gitlab/gitlab-runner:alpine
Debian
docker run --detach \ --name gitlab-runner \ --restart always \ --volume /var/run/docker.sock:/var/run/docker.sock \ --volume /srv/gitlab-runner/config:/etc/gitlab-runner \ gitlab/gitlab-runner:latest
CentOS
docker run --detach \ --name gitlab-runner \ --restart always \ --volume /var/run/docker.sock:/var/run/docker.sock \ --volume /srv/gitlab-runner/config:/etc/gitlab-runner:Z \ gitlab/gitlab-runner:v13.2.2
MacOS
brew install gitlab-runner brew services start gitlab-runner brew services stop gitlab-runner
Raspbian
cat <<EOF >> /etc/apt/sources.list.d/gitlab_raspberry-pi2.list
deb https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main
deb-src https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main
EOF
wget -qO - https://packages.gitlab.com/gitlab/raspberry-pi2/gpgkey|apt-key add -
apt update;apt list --upgradable;apt search gitlab-ce
# pios swap memory
printf '\nbefore:\n';free -th;\
sed -i "s|CONF_SWAPSIZE=100|CONF_SWAPSIZE=2048|" /etc/dphys-swapfile;\
service dphys-swapfile restart;\
printf '\nupdate:\n';free -th
GIT_FILE_CFG='/etc/gitlab/gitlab.rb';\
GIT_XTRN_URL_FIND="external_url 'http://gitlab.example.com'";\
GIT_XTRN_URL_FILL="external_url 'https://cdn.chorke.org/gitlab'";\
sed -i "s|$GIT_XTRN_URL_FIND|$GIT_XTRN_URL_FILL|" "$GIT_FILE_CFG"
32 external_url 'http://gitlab.example.com'
────────────────────────────────────────────────────────────────
88 # gitlab_rails['gitlab_default_can_create_group'] = true
89 # gitlab_rails['gitlab_username_changing_enabled'] = true
────────────────────────────────────────────────────────────────
103 # gitlab_rails['gitlab_default_theme'] = 2
────────────────────────────────────────────────────────────────
315 # gitlab_rails['lfs_enabled'] = true
────────────────────────────────────────────────────────────────
530 # git_data_dirs({
531 # "default" => {
532 # "path" => "/mnt/nfs-01/git-data"
533 # }
534 # })
────────────────────────────────────────────────────────────────
879 # puma['worker_processes'] = 2
────────────────────────────────────────────────────────────────
916 # sidekiq['max_concurrency'] = 50
────────────────────────────────────────────────────────────────
1810 # prometheus_monitoring['enable'] = true
|
external_url 'https://cdn.chorke.org/gitlab'
────────────────────────────────────────────────────────────────
gitlab_rails['gitlab_default_can_create_group'] = false
gitlab_rails['gitlab_username_changing_enabled'] = false
────────────────────────────────────────────────────────────────
gitlab_rails['gitlab_default_theme'] = 5
────────────────────────────────────────────────────────────────
gitlab_rails['lfs_enabled'] = true
────────────────────────────────────────────────────────────────
git_data_dirs({
"default" => {
"path" => "/chorke/academia/nfs/gitlab/git-data"
}
})
────────────────────────────────────────────────────────────────
puma['worker_processes'] = 2
────────────────────────────────────────────────────────────────
sidekiq['max_concurrency'] = 9
────────────────────────────────────────────────────────────────
prometheus_monitoring['enable'] = false
|
nano /etc/gitlab/gitlab.rb
gitlab-ctl reconfigure
gitlab-ctl status
gitlab-ctl stop
Knowledge
SSH Local Forwarding: ssh -L 9050:localhost:9050 [email protected] http://localhost:9050/ user: root pass: 5iveL!fe
Sign-up Restrictions: https://cdn.chorke.org/gitlab/admin/application_settings/general Sign-up enabled (Unchecked)
docker logs gitlab docker restart gitlab docker exec -it gitlab /bin/bash docker exec gitlab update-permissions docker exec -it gitlab vim /etc/gitlab/gitlab.rb
docker logs gitlab-runner docker restart gitlab-runner docker exec -it gitlab-runner gitlab-runner --help docker exec -it gitlab-runner gitlab-runner register
docker exec -it gitlab-runner gitlab-runner list docker exec -it gitlab-runner gitlab-runner verify docker exec -it gitlab-runner gitlab-runner verify --delete
docker-machine create --driver virtualbox default docker-machine start default docker-machine stop default docker-machine ip default docker-machine ls
lsblk fdisk -l smartctl -a /dev/sda e2label /dev/sda1 CK10010100 mkfs.ext4 /dev/sda1 -L CK10010100 mkdir /chorke/academia/nfs/gitlab chown pi /chorke/academia/nfs/gitlab mount /dev/sda1 /chorke/academia/nfs/gitlab
SELinux: https://docs.gitlab.com/runner/install/docker.html#selinux https://github.com/dpw/selinux-dockersock
curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.deb.sh | sudo bash curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash curl -s https://packages.gitlab.com/install/repositories/gitlab/raspberry-pi2/script.deb.sh | sudo bash