GitLab

Linux: export GITLAB_HOME=/srv/gitlab

MacOS: export GITLAB_HOME=$HOME/gitlab

Local location	Container location	Usage
$GITLAB_HOME/gitlab13/data	/var/opt/gitlab	Application data
$GITLAB_HOME/gitlab13/logs	/var/log/gitlab	Application Logs
$GITLAB_HOME/gitlab13/config	/etc/gitlab	GitLab configuration

docker run -it --rm \
--publish 9050:80 \
--publish 4321:22 \
--publish 4430:443 \
gitlab/gitlab-ce:13.2.3-ce.0 \
bin/bash
id; exit

mkdir -p $GITLAB_HOME/gitlab13/{config,data,logs}
#chown -R 0:0 $GITLAB_HOME/gitlab13/

Docker

Debian

docker run --detach \
--hostname cdn.chorke.org \
--env GITLAB_OMNIBUS_CONFIG="external_url 'https://cdn.chorke.org/gitlab'; gitlab_rails['lfs_enabled'] = true;" \
--publish 4430:443 \
--publish 9050:80 \
--publish 4321:22 \
--name gitlab \
--restart always \
--volume $GITLAB_HOME/gitlab13/config:/etc/gitlab \
--volume $GITLAB_HOME/gitlab13/logs:/var/log/gitlab \
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab \
gitlab/gitlab-ce:13.2.3-ce.0

CentOS

docker run --detach \
--hostname cdn.chorke.org \
--env GITLAB_OMNIBUS_CONFIG="external_url 'https://cdn.chorke.org/gitlab'; gitlab_rails['lfs_enabled'] = true;" \
--publish 4430:443 \
--publish 9050:80 \
--publish 4321:22 \
--name gitlab \
--restart always \
--volume $GITLAB_HOME/gitlab13/config:/etc/gitlab:Z \
--volume $GITLAB_HOME/gitlab13/logs:/var/log/gitlab:Z \
--volume $GITLAB_HOME/gitlab13/data:/var/opt/gitlab:Z \
gitlab/gitlab-ce:13.2.3-ce.0

Mailer

docker exec -it gitlab vim /etc/gitlab/gitlab.rb

gitlab_rails['gitlab_email_enabled'] = true
gitlab_rails['gitlab_email_from'] = '[email protected]'
gitlab_rails['gitlab_email_display_name'] = 'GitLab'
gitlab_rails['gitlab_email_reply_to'] = '[email protected]'
gitlab_rails['gitlab_email_subject_suffix'] = 'GitLab'

docker exec -it gitlab vim /etc/gitlab/gitlab.rb

gitlab_rails['smtp_enable'] = true
gitlab_rails['smtp_address'] = "mail.chorke.org"
gitlab_rails['smtp_port'] = 25
gitlab_rails['smtp_user_name'] = "[email protected]"
gitlab_rails['smtp_password'] = "p@$$w0rd"
gitlab_rails['smtp_domain'] = "mail.chorke.org"
gitlab_rails['smtp_authentication'] = "login"
gitlab_rails['smtp_enable_starttls_auto'] = false
gitlab_rails['smtp_tls'] = false

docker exec -it gitlab vim /etc/gitlab/gitlab.rb

gitlab_rails['smtp_openssl_verify_mode'] = 'none'

Apache

CentOS 7

vim /etc/httpd/conf.sites.d/00-cdn.chorke.org-le-ssl.conf

<IfModule mod_ssl.c>
<VirtualHost *:443>
    SSLProxyEngine On
    ProxyRequests Off
    SSLProxyVerify None
    ProxyPreserveHost On
    AllowEncodedSlashes On
    SSLProxyCheckPeerCN Off
    SSLProxyCheckPeerName Off
    SSLProxyCheckPeerExpire Off
    #....misc apache cfg....

    <Location /gitlab>
        Order Allow,Deny
        Allow from all
        ProxyPass https://localhost:4430/gitlab nocanon
        ProxyPassReverse https://localhost:4430/gitlab
    </Location>

    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateFile /etc/letsencrypt/live/cdn.chorke.org/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/cdn.chorke.org/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/cdn.chorke.org/chain.pem
</VirtualHost>
</IfModule>

Runner

docker pull gitlab/gitlab-runner:latest
docker pull gitlab/gitlab-runner:alpine

Debian

docker run --detach \
--name gitlab-runner \
--restart always \
--volume /var/run/docker.sock:/var/run/docker.sock \
--volume /srv/gitlab-runner/config:/etc/gitlab-runner \
gitlab/gitlab-runner:latest

CentOS

docker run --detach \
--name gitlab-runner \
--restart always \
--volume /var/run/docker.sock:/var/run/docker.sock \
--volume /srv/gitlab-runner/config:/etc/gitlab-runner:Z \
gitlab/gitlab-runner:v13.2.2

MacOS

brew install gitlab-runner
brew services start gitlab-runner
brew services stop gitlab-runner

Raspbian

cat <<EOF >> /etc/apt/sources.list.d/gitlab_raspberry-pi2.list
deb https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main
deb-src https://packages.gitlab.com/gitlab/raspberry-pi2/raspbian/ buster main
EOF

wget -qO - https://packages.gitlab.com/gitlab/raspberry-pi2/gpgkey|apt-key add -
apt update;apt list --upgradable;apt search gitlab-ce

# pios swap memory
printf '\nbefore:\n';free -th;\
sed -i "s|CONF_SWAPSIZE=100|CONF_SWAPSIZE=2048|" /etc/dphys-swapfile;\
service dphys-swapfile restart;\
printf '\nupdate:\n';free -th

---

GIT_FILE_CFG='/etc/gitlab/gitlab.rb';\
GIT_XTRN_URL_FIND="external_url 'http://gitlab.example.com'";\
GIT_XTRN_URL_FILL="external_url 'https://cdn.chorke.org/gitlab'";\
sed -i "s|$GIT_XTRN_URL_FIND|$GIT_XTRN_URL_FILL|" "$GIT_FILE_CFG"

32 external_url 'http://gitlab.example.com' ──────────────────────────────────────────────────────────────── 88 # gitlab_rails['gitlab_default_can_create_group'] = true 89 # gitlab_rails['gitlab_username_changing_enabled'] = true ──────────────────────────────────────────────────────────────── 103 # gitlab_rails['gitlab_default_theme'] = 2 ──────────────────────────────────────────────────────────────── 315 # gitlab_rails['lfs_enabled'] = true ──────────────────────────────────────────────────────────────── 530 # git_data_dirs({ 531 # "default" => { 532 # "path" => "/mnt/nfs-01/git-data" 533 # } 534 # }) ──────────────────────────────────────────────────────────────── 879 # puma['worker_processes'] = 2 ──────────────────────────────────────────────────────────────── 916 # sidekiq['max_concurrency'] = 50 ──────────────────────────────────────────────────────────────── 1810 # prometheus_monitoring['enable'] = true

external_url 'https://cdn.chorke.org/gitlab' ──────────────────────────────────────────────────────────────── gitlab_rails['gitlab_default_can_create_group'] = false gitlab_rails['gitlab_username_changing_enabled'] = false ──────────────────────────────────────────────────────────────── gitlab_rails['gitlab_default_theme'] = 5 ──────────────────────────────────────────────────────────────── gitlab_rails['lfs_enabled'] = true ──────────────────────────────────────────────────────────────── git_data_dirs({ "default" => { "path" => "/chorke/academia/nfs/gitlab/git-data" } }) ──────────────────────────────────────────────────────────────── puma['worker_processes'] = 2 ──────────────────────────────────────────────────────────────── sidekiq['max_concurrency'] = 9 ──────────────────────────────────────────────────────────────── prometheus_monitoring['enable'] = false

nano /etc/gitlab/gitlab.rb ──────────────────────────────────────────────────────────────── gitlab-ctl reconfigure gitlab-ctl status gitlab-ctl stop

nano /etc/gitlab/gitlab.rb ──────────────────────────────────────────────────────────────── gitlab-ctl reconfigure service gitlab restart service gitlab status

Knowledge

SSH Local Forwarding:
ssh -L 9050:localhost:9050 [email protected]
http://localhost:9050/
user: root
pass: 5iveL!fe

Sign-up Restrictions:
https://cdn.chorke.org/gitlab/admin/application_settings/general
Sign-up enabled (Unchecked)

docker logs gitlab
docker restart gitlab
docker exec -it gitlab /bin/bash
docker exec gitlab update-permissions
docker exec -it gitlab vim /etc/gitlab/gitlab.rb

docker logs gitlab-runner
docker restart gitlab-runner
docker exec -it gitlab-runner gitlab-runner --help
docker exec -it gitlab-runner gitlab-runner register

docker exec -it gitlab-runner gitlab-runner list
docker exec -it gitlab-runner gitlab-runner verify
docker exec -it gitlab-runner gitlab-runner verify --delete

docker-machine create --driver virtualbox default
docker-machine start default
docker-machine stop default
docker-machine ip default
docker-machine ls

---

lsblk
fdisk -l
smartctl -a /dev/sda
e2label /dev/sda1 CK10010100
mkfs.ext4 /dev/sda1 -L CK10010100
mkdir /chorke/academia/nfs/gitlab
chown pi /chorke/academia/nfs/gitlab
mount /dev/sda1 /chorke/academia/nfs/gitlab

---

SELinux:
https://docs.gitlab.com/runner/install/docker.html#selinux
https://github.com/dpw/selinux-dockersock

curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.deb.sh | sudo bash
curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash
curl -s https://packages.gitlab.com/install/repositories/gitlab/raspberry-pi2/script.deb.sh | sudo bash

References

Setup Apache2 as Reverse Proxy for Nginx Backing up and restoring GitLab Omnibus GitLab Docker Source Enable relative URL in GitLab GitLab CE Docker Image GitLab Docker Image Package information Package Licensing Enable HTTPS SMTP settings

Run GitLab Runner in a container GitLab Configuration Settings GitLab Runner commands GitLab Database Settings GitLab Runner on macOS GitLab Maven Repository GitLab Runner Executors Installation instructions GitLab SMTP Settings Registering Runners

SSL Handshake error with remote server Docker Machine vs. Docker Engine Getting Start Docker Machine Docker Machine Overview Docker Machine Executor Install Docker Machine Kubernetes Executor Docker Executor Shell Executor SSH Executor

---

GitLab 13.0 runs on Puma instead of Unicorn HDD partition naming convention in Linux Difference between /mnt vs /media Setup XCode Configuration YouTube GitLab Repository for Raspberry Pi OS GitLab Install on a Raspberry Pi OS Support running GitLab on ARM64 Best Linux Files System for SSD Convention for HDD Label