GitLab: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
|||
Line 18: | Line 18: | ||
| <code>$GITLAB_HOME/gitlab13/config</code> || <code>/etc/gitlab</code> || GitLab configuration | | <code>$GITLAB_HOME/gitlab13/config</code> || <code>/etc/gitlab</code> || GitLab configuration | ||
|} | |} | ||
< | <syntaxhighlight lang="bash"> | ||
docker run -it --rm \ | docker run -it --rm \ | ||
--publish 9050:80 \ | --publish 9050:80 \ | ||
Line 26: | Line 26: | ||
bin/bash | bin/bash | ||
id; exit | id; exit | ||
</ | </syntaxhighlight> | ||
< | <syntaxhighlight lang="bash"> | ||
mkdir -p $GITLAB_HOME/gitlab13/{config,data,logs} | mkdir -p $GITLAB_HOME/gitlab13/{config,data,logs} | ||
#chown -R 0:0 $GITLAB_HOME/gitlab13/ | #chown -R 0:0 $GITLAB_HOME/gitlab13/ | ||
</ | </syntaxhighlight> | ||
==Docker== | ==Docker== | ||
===Debian=== | ===Debian=== | ||
< | <syntaxhighlight lang="bash" highlight="3,8-12" line> | ||
sudo docker run --detach \ | sudo docker run --detach \ | ||
--hostname cdn.chorke.org \ | --hostname cdn.chorke.org \ | ||
Line 49: | Line 49: | ||
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab \ | --volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab \ | ||
gitlab/gitlab-ce:13.2.3-ce.0 | gitlab/gitlab-ce:13.2.3-ce.0 | ||
</ | </syntaxhighlight> | ||
===Fedora=== | ===Fedora=== | ||
< | <syntaxhighlight lang="bash" highlight="3,8-12" line> | ||
sudo docker run --detach \ | sudo docker run --detach \ | ||
--hostname cdn.chorke.org \ | --hostname cdn.chorke.org \ | ||
Line 66: | Line 66: | ||
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab:Z \ | --volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab:Z \ | ||
gitlab/gitlab-ce:13.2.3-ce.0 | gitlab/gitlab-ce:13.2.3-ce.0 | ||
</ | </syntaxhighlight> | ||
==Mailer== | ==Mailer== | ||
<code>docker exec -it gitlab vim /etc/gitlab/gitlab.rb</code> | <code>docker exec -it gitlab vim /etc/gitlab/gitlab.rb</code> | ||
< | <syntaxhighlight lang="ruby" highlight="2,4-6" start="80" line> | ||
gitlab_rails['smtp_enable'] = true | gitlab_rails['smtp_enable'] = true | ||
gitlab_rails['smtp_address'] = "mail.chorke.org" | gitlab_rails['smtp_address'] = "mail.chorke.org" | ||
Line 80: | Line 80: | ||
gitlab_rails['smtp_enable_starttls_auto'] = false | gitlab_rails['smtp_enable_starttls_auto'] = false | ||
gitlab_rails['smtp_tls'] = false | gitlab_rails['smtp_tls'] = false | ||
</ | </syntaxhighlight> | ||
<code>docker exec -it gitlab vim /etc/gitlab/gitlab.rb</code> | <code>docker exec -it gitlab vim /etc/gitlab/gitlab.rb</code> | ||
< | <syntaxhighlight lang="ruby" highlight="1" start="92" line> | ||
gitlab_rails['smtp_openssl_verify_mode'] = 'none' | gitlab_rails['smtp_openssl_verify_mode'] = 'none' | ||
</ | </syntaxhighlight> | ||
<code>docker exec -it gitlab vim /etc/gitlab/gitlab.rb</code> | <code>docker exec -it gitlab vim /etc/gitlab/gitlab.rb</code> | ||
< | <syntaxhighlight lang="ruby" highlight="5-8" start="99" line> | ||
gitlab_rails['gitlab_email_enabled'] = true | gitlab_rails['gitlab_email_enabled'] = true | ||
Line 97: | Line 97: | ||
gitlab_rails['gitlab_email_reply_to'] = '[email protected]' | gitlab_rails['gitlab_email_reply_to'] = '[email protected]' | ||
gitlab_rails['gitlab_email_subject_suffix'] = 'GitLab' | gitlab_rails['gitlab_email_subject_suffix'] = 'GitLab' | ||
</ | </syntaxhighlight> | ||
==Apache== | ==Apache== | ||
===CentOS 7=== | ===CentOS 7=== | ||
<code>vim /etc/httpd/conf.sites.d/00-cdn.chorke.org-le-ssl.conf</code> | <code>vim /etc/httpd/conf.sites.d/00-cdn.chorke.org-le-ssl.conf</code> | ||
< | <syntaxhighlight lang="apache" highlight="5,8-10"> | ||
<IfModule mod_ssl.c> | <IfModule mod_ssl.c> | ||
<VirtualHost *:443> | <VirtualHost *:443> | ||
Line 128: | Line 128: | ||
</VirtualHost> | </VirtualHost> | ||
</IfModule> | </IfModule> | ||
</ | </syntaxhighlight> | ||
==Runner== | ==Runner== | ||
Line 156: | Line 156: | ||
==Raspbian== | ==Raspbian== | ||
< | <syntaxhighlight lang="bash"> | ||
cat <<EOF >> /etc/apt/sources.list.d/gitlab_raspberry-pi2.list | cat <<EOF >> /etc/apt/sources.list.d/gitlab_raspberry-pi2.list | ||
deb https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main | deb https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main | ||
Line 164: | Line 164: | ||
wget -qO - https://packages.gitlab.com/gitlab/raspberry-pi2/gpgkey|apt-key add - | wget -qO - https://packages.gitlab.com/gitlab/raspberry-pi2/gpgkey|apt-key add - | ||
apt update;apt list --upgradable;apt search gitlab-ce | apt update;apt list --upgradable;apt search gitlab-ce | ||
</ | </syntaxhighlight> | ||
< | <syntaxhighlight lang="bash"> | ||
# pios swap memory | # pios swap memory | ||
printf '\nbefore:\n';free -th;\ | printf '\nbefore:\n';free -th;\ | ||
Line 172: | Line 172: | ||
service dphys-swapfile restart;\ | service dphys-swapfile restart;\ | ||
printf '\nupdate:\n';free -th | printf '\nupdate:\n';free -th | ||
</ | </syntaxhighlight> | ||
---- | ---- | ||
< | <syntaxhighlight lang="bash"> | ||
GIT_FILE_CFG='/etc/gitlab/gitlab.rb';\ | GIT_FILE_CFG='/etc/gitlab/gitlab.rb';\ | ||
GIT_XTRN_URL_FIND="external_url 'http://gitlab.example.com'";\ | GIT_XTRN_URL_FIND="external_url 'http://gitlab.example.com'";\ | ||
GIT_XTRN_URL_FILL="external_url 'https://cdn.chorke.org/gitlab'";\ | GIT_XTRN_URL_FILL="external_url 'https://cdn.chorke.org/gitlab'";\ | ||
sed -i "s|$GIT_XTRN_URL_FIND|$GIT_XTRN_URL_FILL|" "$GIT_FILE_CFG" | sed -i "s|$GIT_XTRN_URL_FIND|$GIT_XTRN_URL_FILL|" "$GIT_FILE_CFG" | ||
</ | </syntaxhighlight> | ||
{| | {| | ||
| valign="top" | | | valign="top" | | ||
< | <syntaxhighlight lang="ruby"> | ||
32 external_url 'http://gitlab.example.com' | 32 external_url 'http://gitlab.example.com' | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
Line 206: | Line 206: | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
1894 # prometheus_monitoring['enable'] = true | 1894 # prometheus_monitoring['enable'] = true | ||
</ | </syntaxhighlight> | ||
| valign="top" | | | valign="top" | | ||
< | <syntaxhighlight lang="ruby"> | ||
external_url 'https://cdn.chorke.org/gitlab' | external_url 'https://cdn.chorke.org/gitlab' | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
Line 232: | Line 232: | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
prometheus_monitoring['enable'] = false | prometheus_monitoring['enable'] = false | ||
</ | </syntaxhighlight> | ||
|} | |} | ||
{| | {| | ||
| valign="top" | | | valign="top" | | ||
< | <syntaxhighlight lang="bash"> | ||
nano /etc/gitlab/gitlab.rb | nano /etc/gitlab/gitlab.rb | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
Line 242: | Line 242: | ||
gitlab-ctl status | gitlab-ctl status | ||
gitlab-ctl stop | gitlab-ctl stop | ||
</ | </syntaxhighlight> | ||
| valign="top" | | | valign="top" | | ||
< | <syntaxhighlight lang="bash"> | ||
nano /etc/gitlab/gitlab.rb | nano /etc/gitlab/gitlab.rb | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
Line 251: | Line 251: | ||
service gitlab restart | service gitlab restart | ||
service gitlab status | service gitlab status | ||
</ | </syntaxhighlight> | ||
|} | |} | ||
---- | ---- | ||
Line 257: | Line 257: | ||
{| | {| | ||
| valign="top" | | | valign="top" | | ||
< | <syntaxhighlight lang="ini"> | ||
13 #Port 22 | 13 #Port 22 | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
</ | </syntaxhighlight> | ||
telnet localhost 4321 | telnet localhost 4321 | ||
Line 267: | Line 267: | ||
| valign="top" | | | valign="top" | | ||
< | <syntaxhighlight lang="ini"> | ||
Port 4321 | Port 4321 | ||
──────────────────────────────────────────────────────────────── | ──────────────────────────────────────────────────────────────── | ||
</ | </syntaxhighlight> | ||
systemctl status sshd | systemctl status sshd |
Revision as of 00:38, 6 August 2024
Linux: export GITLAB_HOME=/srv/gitlab |
MacOS: export GITLAB_HOME=$HOME/gitlab |
Local location | Container location | Usage |
---|---|---|
$GITLAB_HOME/gitlab13/data |
/var/opt/gitlab |
Application data |
$GITLAB_HOME/gitlab13/logs |
/var/log/gitlab |
Application Logs |
$GITLAB_HOME/gitlab13/config |
/etc/gitlab |
GitLab configuration |
docker run -it --rm \
--publish 9050:80 \
--publish 4321:22 \
--publish 4430:443 \
gitlab/gitlab-ce:13.2.3-ce.0 \
bin/bash
id; exit
mkdir -p $GITLAB_HOME/gitlab13/{config,data,logs}
#chown -R 0:0 $GITLAB_HOME/gitlab13/
Docker
Debian
sudo docker run --detach \
--hostname cdn.chorke.org \
--env GITLAB_OMNIBUS_CONFIG="external_url 'https://cdn.chorke.org/gitlab'; gitlab_rails['lfs_enabled'] = true;" \
--publish 4430:443 \
--publish 9050:80 \
--publish 4321:22 \
--name gitlab \
--shm-size 256m \
--restart always \
--volume $GITLAB_HOME/gitlab13/config:/etc/gitlab \
--volume $GITLAB_HOME/gitlab13/logs:/var/log/gitlab \
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab \
gitlab/gitlab-ce:13.2.3-ce.0
Fedora
sudo docker run --detach \
--hostname cdn.chorke.org \
--env GITLAB_OMNIBUS_CONFIG="external_url 'https://cdn.chorke.org/gitlab'; gitlab_rails['lfs_enabled'] = true;" \
--publish 4430:443 \
--publish 9050:80 \
--publish 4321:22 \
--name gitlab \
--shm-size 256m \
--restart always \
--volume $GITLAB_HOME/gitlab13/config:/etc/gitlab:Z \
--volume $GITLAB_HOME/gitlab13/logs:/var/log/gitlab:Z \
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab:Z \
gitlab/gitlab-ce:13.2.3-ce.0
Mailer
docker exec -it gitlab vim /etc/gitlab/gitlab.rb
gitlab_rails['smtp_enable'] = true
gitlab_rails['smtp_address'] = "mail.chorke.org"
gitlab_rails['smtp_port'] = 25
gitlab_rails['smtp_user_name'] = "[email protected]"
gitlab_rails['smtp_password'] = "p@$$w0rd"
gitlab_rails['smtp_domain'] = "mail.chorke.org"
gitlab_rails['smtp_authentication'] = "login"
gitlab_rails['smtp_enable_starttls_auto'] = false
gitlab_rails['smtp_tls'] = false
docker exec -it gitlab vim /etc/gitlab/gitlab.rb
gitlab_rails['smtp_openssl_verify_mode'] = 'none'
docker exec -it gitlab vim /etc/gitlab/gitlab.rb
gitlab_rails['gitlab_email_enabled'] = true
##! If your SMTP server does not like the default 'From: [email protected]'
##! can change the 'From' with this setting.
gitlab_rails['gitlab_email_from'] = '[email protected]'
gitlab_rails['gitlab_email_display_name'] = 'GitLab'
gitlab_rails['gitlab_email_reply_to'] = '[email protected]'
gitlab_rails['gitlab_email_subject_suffix'] = 'GitLab'
Apache
CentOS 7
vim /etc/httpd/conf.sites.d/00-cdn.chorke.org-le-ssl.conf
<IfModule mod_ssl.c>
<VirtualHost *:443>
SSLProxyEngine On
ProxyRequests Off
SSLProxyVerify None
ProxyPreserveHost On
AllowEncodedSlashes On
SSLProxyCheckPeerCN Off
SSLProxyCheckPeerName Off
SSLProxyCheckPeerExpire Off
#....misc apache cfg....
<Location /gitlab>
Order Allow,Deny
Allow from all
ProxyPass https://localhost:4430/gitlab nocanon
ProxyPassReverse https://localhost:4430/gitlab
</Location>
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/cdn.chorke.org/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/cdn.chorke.org/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/cdn.chorke.org/chain.pem
</VirtualHost>
</IfModule>
Runner
docker pull gitlab/gitlab-runner:latest docker pull gitlab/gitlab-runner:alpine
Debian
docker run --detach \ --name gitlab-runner \ --restart always \ --volume /var/run/docker.sock:/var/run/docker.sock \ --volume /srv/gitlab-runner/config:/etc/gitlab-runner \ gitlab/gitlab-runner:latest
CentOS
docker run --detach \ --name gitlab-runner \ --restart always \ --volume /var/run/docker.sock:/var/run/docker.sock \ --volume /srv/gitlab-runner/config:/etc/gitlab-runner:Z \ gitlab/gitlab-runner:v13.2.2
MacOS
brew install gitlab-runner brew services start gitlab-runner brew services stop gitlab-runner
Raspbian
cat <<EOF >> /etc/apt/sources.list.d/gitlab_raspberry-pi2.list
deb https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main
deb-src https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main
EOF
wget -qO - https://packages.gitlab.com/gitlab/raspberry-pi2/gpgkey|apt-key add -
apt update;apt list --upgradable;apt search gitlab-ce
# pios swap memory
printf '\nbefore:\n';free -th;\
sed -i "s|CONF_SWAPSIZE=100|CONF_SWAPSIZE=2048|" /etc/dphys-swapfile;\
service dphys-swapfile restart;\
printf '\nupdate:\n';free -th
GIT_FILE_CFG='/etc/gitlab/gitlab.rb';\
GIT_XTRN_URL_FIND="external_url 'http://gitlab.example.com'";\
GIT_XTRN_URL_FILL="external_url 'https://cdn.chorke.org/gitlab'";\
sed -i "s|$GIT_XTRN_URL_FIND|$GIT_XTRN_URL_FILL|" "$GIT_FILE_CFG"
32 external_url 'http://gitlab.example.com'
────────────────────────────────────────────────────────────────
113 # gitlab_rails['gitlab_default_can_create_group'] = true
114 # gitlab_rails['gitlab_username_changing_enabled'] = true
────────────────────────────────────────────────────────────────
128 # gitlab_rails['gitlab_default_theme'] = 2
────────────────────────────────────────────────────────────────
344 # gitlab_rails['lfs_enabled'] = true
────────────────────────────────────────────────────────────────
548 # gitlab_rails['gitlab_shell_ssh_port'] = 22
────────────────────────────────────────────────────────────────
583 # git_data_dirs({
584 # "default" => {
585 # "path" => "/mnt/nfs-01/git-data"
586 # }
587 # })
────────────────────────────────────────────────────────────────
920 # puma['worker_processes'] = 2
────────────────────────────────────────────────────────────────
959 # sidekiq['max_concurrency'] = 50
────────────────────────────────────────────────────────────────
1894 # prometheus_monitoring['enable'] = true
|
external_url 'https://cdn.chorke.org/gitlab'
────────────────────────────────────────────────────────────────
gitlab_rails['gitlab_default_can_create_group'] = false
gitlab_rails['gitlab_username_changing_enabled'] = false
────────────────────────────────────────────────────────────────
gitlab_rails['gitlab_default_theme'] = 5
────────────────────────────────────────────────────────────────
gitlab_rails['lfs_enabled'] = true
────────────────────────────────────────────────────────────────
gitlab_rails['gitlab_shell_ssh_port'] = 4321
────────────────────────────────────────────────────────────────
git_data_dirs({
"default" => {
"path" => "/chorke/academia/nfs/gitlab/git-data"
}
})
────────────────────────────────────────────────────────────────
puma['worker_processes'] = 2
────────────────────────────────────────────────────────────────
sidekiq['max_concurrency'] = 9
────────────────────────────────────────────────────────────────
prometheus_monitoring['enable'] = false
|
nano /etc/gitlab/gitlab.rb
────────────────────────────────────────────────────────────────
gitlab-ctl reconfigure
gitlab-ctl status
gitlab-ctl stop
|
nano /etc/gitlab/gitlab.rb
────────────────────────────────────────────────────────────────
gitlab-ctl reconfigure
service gitlab restart
service gitlab status
|
nano /etc/ssh/sshd_config
13 #Port 22
────────────────────────────────────────────────────────────────
telnet localhost 4321 systemctl restart sshd ssh -P4321 [email protected] |
Port 4321
────────────────────────────────────────────────────────────────
systemctl status sshd telnet git0.dev.shahed.biz 4321 ssh -P4321 [email protected] |
Upgrade
from 13.6.3-ce.0: sudo apt install gitlab-ce=13.8.8-ce.0 sudo apt install gitlab-ce=13.12.15-ce.0 sudo apt install gitlab-ce=14.0.11-ce.0 sudo apt install gitlab-ce=14.1.8-ce.0 sudo apt install gitlab-ce=14.2.6-ce.0 from 14.7.1-ce.0: sudo gitlab-ctl reconfigure sudo gitlab-ctl restart
Knowledge
SSH Local Forwarding: ssh -L 9050:localhost:9050 [email protected] http://localhost:9050/ user: root pass: 5iveL!fe
Sign-up Restrictions: https://cdn.chorke.org/gitlab/admin/application_settings/general Sign-up enabled (Unchecked)
docker logs gitlab docker restart gitlab docker exec -it gitlab /bin/bash docker exec gitlab update-permissions docker exec -it gitlab vim /etc/gitlab/gitlab.rb
docker logs gitlab-runner docker restart gitlab-runner docker exec -it gitlab-runner gitlab-runner --help docker exec -it gitlab-runner gitlab-runner register
docker exec -it gitlab-runner gitlab-runner list docker exec -it gitlab-runner gitlab-runner verify docker exec -it gitlab-runner gitlab-runner verify --delete
docker-machine create --driver virtualbox default docker-machine start default docker-machine stop default docker-machine ip default docker-machine ls
lsblk fdisk -l smartctl -a /dev/sda e2label /dev/sda1 CK10010100 mkfs.ext4 /dev/sda1 -L CK10010100 mkdir /chorke/academia/nfs/gitlab chown pi /chorke/academia/nfs/gitlab mount /dev/sda1 /chorke/academia/nfs/gitlab
SELinux: https://docs.gitlab.com/runner/install/docker.html#selinux https://github.com/dpw/selinux-dockersock
curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.deb.sh | sudo bash curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash curl -s https://packages.gitlab.com/install/repositories/gitlab/raspberry-pi2/script.deb.sh | sudo bash