CentOS6安装gitlab

傷城~ 2024-04-19 08:53 115阅读 0赞

### 文章目录 ###

*  1，docker运行gitlab
 *   *  取消用户注册功能
     *  gitlab配置ssh公钥
     *   *  a, git clone http地址
         *  b, git clone ssh地址
 *  2，参考docker-gitlab的配置文件：Dockerfile, 手动安装
 *   *  简化后的流程
     *  简化后的脚本
     *  手动初始化报错：ArgumentError: could not find a temporary directory
 *  3, 安装gitlab-runner，配置CI/CD

# 1，docker运行gitlab #

参考gitlab docker镜像使用:[https://docs.gitlab.com/omnibus/docker/README.html][https_docs.gitlab.com_omnibus_docker_README.html]

sudo docker run --detach \
      --env GITLAB_OMNIBUS_CONFIG="external_url 'http://my.domain.com/'; gitlab_rails['lfs_enabled'] = true;" \
      --hostname my.domain.com \
      --publish 443:443 --publish 80:80 --publish 22:22 \
      --name gitlab \
      --restart always \
      --volume gitlab/config:/etc/gitlab \
      --volume gitlab/logs:/var/log/gitlab \
      --volume gitlab/data:/var/opt/gitlab \
      gitlab/gitlab-ee:latest

## 取消用户注册功能 ##

左上角【管理中心】 —> 设置 --> 注册限制  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V5ZW9mZWFnbGU_size_16_color_FFFFFF_t_70]

## gitlab配置ssh公钥 ##

没有配置ssh公钥会有如下警告：（可点击该链接进行配置)  
![在这里插入图片描述][20190916114451776.png]  
也可以自己手动添加：（用户头像: 设置 --> SSH密钥, 在输入框中粘贴服务器的能够免密登录的某个用户公钥）  
此时，clone或提交代码的方式有两种：

### a, git clone http地址 ###

git clone http://192.168.1.17:root/test1.git 
    #回车后，会提示输入登录gitlab的：用户名/密码

### b, git clone ssh地址 ###

下载导入在gitlab里面配好公钥的**对应私钥文件**（我这里另存为.pub），修改git配置文件如下  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V5ZW9mZWFnbGU_size_16_color_FFFFFF_t_70 1]

# 2，参考docker-gitlab的配置文件：Dockerfile, 手动安装 #

Dockerfile镜像编译: [https://gitlab.com/gitlab-org/omnibus-gitlab/tree/master/docker][https_gitlab.com_gitlab-org_omnibus-gitlab_tree_master_docker]

## 简化后的流程 ##

a, Dockerfile:
    #安装软件:ca-certificates  openssh-server  wget    vim  tzdata 
    COPY RELEASE /
    COPY assets/ /assets/
    RUN /assets/setup
    CMD ["/assets/wrapper"]
    
    b, /assets/setup： 下载并安装gitlab
    wget --quiet --header "PRIVATE-TOKEN: ${TRIGGER_PRIVATE_TOKEN}" ${DOWNLOAD_URL} -O /tmp/gitlab.deb
    // https://packages.gitlab.com/gitlab/gitlab-ee/packages/el/6/gitlab-ee-13.2.1-ee.0.el6.x86_64.rpm
    wget --content-disposition https://packages.gitlab.com/gitlab/gitlab-ee/packages/el/6/gitlab-ee-13.2.1-ee.0.el6.x86_64.rpm/download.rpm
    // https://packages.gitlab.com/gitlab/gitlab-ee/packages/el/7/gitlab-ee-13.2.1-ee.0.el7.x86_64.rpm
    wget --content-disposition https://packages.gitlab.com/gitlab/gitlab-ee/packages/el/6/gitlab-ee-13.2.1-ee.0.el6.x86_64.rpm/download.rpm
    // https://packages.gitlab.com/gitlab/gitlab-ee/packages/ubuntu/xenial/gitlab-ee_13.2.1-ee.0_amd64.deb
    wget --content-disposition https://packages.gitlab.com/gitlab/gitlab-ee/packages/ubuntu/xenial/gitlab-ee_13.2.1-ee.0_amd64.deb/download.deb
    dpkg -i /tmp/gitlab.deb && rm /tmp/gitlab.deb
    
    #运行sshd服务
    ....
    
    #替换gitlab默认配置文件为：/assets/gitlab.rb
    rm -f /etc/gitlab/gitlab.rb
    sed -i "s/external_url 'GENERATED_EXTERNAL_URL'/# external_url 'GENERATED_EXTERNAL_URL'/" /opt/gitlab/etc/gitlab.rb.template
    sed -i "s@/etc/gitlab/gitlab.rb@/assets/gitlab.rb@" /opt/gitlab/embedded/cookbooks/gitlab/recipes/show_config.rb
    sed -i "s@/etc/gitlab/gitlab.rb@/assets/gitlab.rb@" /opt/gitlab/embedded/cookbooks/gitlab/recipes/config.rb
    
    #创建组，用户(指定uid, gid, 用户家目录) 
    ... 
    
    c, /assets/wrapper: 启动gitlab服务
    /opt/gitlab/embedded/bin/runsvdir-start &
    gitlab-ctl reconfigure
    gitlab-ctl tail &

## 简化后的脚本 ##

#1, 安装软件包
    mkdir /tmp/gitlab-install && cd /tmp/gitlab-install
    yum -y install ca-certificates  openssh-server  wget    vim  tzdata 
    wget https://mirrors.tuna.tsinghua.edu.cn/gitlab-ce/yum/el6/gitlab-ce-13.1.5-ce.0.el6.x86_64.rpm
    rpm -Uvh gitlab-ce-13.1.5-ce.0.el6.x86_64.rpm
    
    #创建ssh服务运行目录
    mkdir -p /opt/gitlab/sv/sshd/supervise /opt/gitlab/sv/sshd/log/supervise
    mkfifo /opt/gitlab/sv/sshd/supervise/ok /opt/gitlab/sv/sshd/log/supervise/ok	
    
    #准备配置文件,并替换
    cat > /opt/gitlab/gitlab.rb <<EOF
    	# Load configuration stored in /etc/gitlab/gitlab.rb
    	from_file("/etc/gitlab/gitlab.rb")
    	## Prevent Postgres from trying to allocate 25% of total memory
    	postgresql['shared_buffers'] = '1MB'
    	# Disable Prometheus node_exporter inside Docker.
    	node_exporter['enable'] = false
    	# Manage accounts with docker
    	manage_accounts['enable'] = false
    	# Get hostname from shell
    	host = \$(hostname).strip
    	external_url "http://#{host}"
    	# Explicitly disable init detection since we are running on a container
    	package['detect_init'] = false
    	# Load custom config from environment variable: GITLAB_OMNIBUS_CONFIG
    	# Disabling the cop since rubocop considers using eval to be security risk but
    	# we don't have an easy way out, atleast yet.
    	eval ENV["GITLAB_OMNIBUS_CONFIG"].to_s # rubocop:disable Security/Eval
    EOF
    
    sed -i "s/external_url 'GENERATED_EXTERNAL_URL'/# external_url 'GENERATED_EXTERNAL_URL'/" /opt/gitlab/etc/gitlab.rb.template
    sed -i "s@/etc/gitlab/gitlab.rb@/opt/gitlab/gitlab.rb@" /opt/gitlab/embedded/cookbooks/gitlab/recipes/show_config.rb
    sed -i "s@/etc/gitlab/gitlab.rb@/opt/gitlab/gitlab.rb@" /opt/gitlab/embedded/cookbooks/gitlab/recipes/config.rb
    
    #2, 创建用户
    userdel git                                                                  
    userdel gitlab-www                                                           
    userdel gitlab-redis                                                         
    userdel gitlab-psql                                                          
    userdel mattermost                                                           
    userdel registry                                                             
    userdel gitlab-prometheus                                                    
    userdel gitlab-consul                                                                                                                                   
    mkdir /var/opt/gitlab                                                        
    useradd -s /bin/sh -d /var/opt/gitlab git                                    
    useradd -s /bin/false -d /var/opt/gitlab/nginx gitlab-www                    
    useradd -s /bin/false -d /var/opt/gitlab/redis gitlab-redis                  
    useradd -s /bin/sh -d /var/opt/gitlab/postgresql gitlab-psql                 
    useradd -s /bin/sh -d /var/opt/gitlab/mattermost mattermost                  
    useradd -s /bin/sh -d /var/opt/gitlab/registry registry                      
    useradd -s /bin/sh -d /var/opt/gitlab/prometheus gitlab-prometheus           
    useradd -s /bin/sh -d /var/opt/gitlab/consul gitlab-consul                   
    
    #3, 启动服务
    /opt/gitlab/embedded/bin/runsvdir-start &
    gitlab-ctl reconfigure

## 手动初始化报错：ArgumentError: could not find a temporary directory ##

chmod +t /tmp

# 3, 安装gitlab-runner，配置CI/CD #

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V5ZW9mZWFnbGU_size_16_color_FFFFFF_t_70 2]

#a, 下载并安装
    # wget  https://mirrors.tuna.tsinghua.edu.cn/gitlab-runner/yum/el6-x86_64/gitlab-runner-13.1.0-1.x86_64.rpm
    # wget  https://mirrors.tuna.tsinghua.edu.cn/gitlab-ci-multi-runner/yum/el6/gitlab-ci-multi-runner-9.5.0-1.x86_64.rpm
    rpm -Uvh runnerxx.rpm
    
    #b, 打开gitlab-->某项目：设置页面--> CI/CD：找到Runner的配置
    #c, 注册Runner到gitlab中
    [root@eadage ~]# gitlab-ci-multi-runner  register
    Runtime platform                                    arch=amd64 os=linux pid=63526 revision=6214287e version=13.1.0
    Running in system-mode.                            
                                                       
    Please enter the gitlab-ci coordinator URL (e.g. https://gitlab.com/):
    http://192.168.56.1/
    Please enter the gitlab-ci token for this runner:
    2nfzsH5Uzby1
    Please enter the gitlab-ci description for this runner:
    [Runnertest]: 
    Please enter the gitlab-ci tags for this runner (comma separated):
    
    Registering runner... succeeded                     runner=2nfzsH5U
    Please enter the executor: virtualbox, docker+machine, docker-ssh+machine, docker, docker-ssh, parallels, shell, ssh, custom, kubernetes:
    shell
    Runner registered successfully. Feel free to start it, but if it's running already the config should be automatically reloaded! 
    
    #d, 启动Runner
    [root@eadage ~]# gitlab-ci-multi-runner  start
    Runtime platform                                    arch=amd64 os=linux pid=85169 revision=6214287e version=13.1.0
    
    #e, 查看Runner
    [root@eadage ~]# gitlab-ci-multi-runner  list
    Runtime platform                                    arch=amd64 os=linux pid=85929 revision=6214287e version=13.1.0
    Listing configured runners                          ConfigFile=/etc/gitlab-runner/config.toml
    runner.13.1                                         Executor=docker Token=2nfzsH5Uzby1bxXyxnLp URL=http://192.168.56.1/
    Runnertest                                          Executor=shell Token=2ADFmWyFsBj-xH6mxviH URL=http://192.168.56.1/

[https_docs.gitlab.com_omnibus_docker_README.html]: https://docs.gitlab.com/omnibus/docker/README.html
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V5ZW9mZWFnbGU_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/bd0d341272674970b9bb7d1967fdd644.png
[20190916114451776.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/b5832a36c9fe4c689e72a7864c6ca5fb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V5ZW9mZWFnbGU_size_16_color_FFFFFF_t_70 1]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/1948f7fe36bd47ac8d0a3e20b38918b2.png
[https_gitlab.com_gitlab-org_omnibus-gitlab_tree_master_docker]: https://gitlab.com/gitlab-org/omnibus-gitlab/tree/master/docker
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2V5ZW9mZWFnbGU_size_16_color_FFFFFF_t_70 2]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/6137bb151fd94e77aff51c47ab8a917b.png