【保姆级】centos 7 搭建 GitLab-EE

m0_69525149

已于 2024-08-21 03:23:08 修改

阅读量960

点赞数 5

文章标签： gitlab

于 2024-03-25 04:18:33 首次发布

本文链接：https://blog.csdn.net/m0_69525149/article/details/137000235

版权

本文详细介绍了在CentOS7.6系统上安装和配置GitLab的过程，包括环境要求、SSH依赖、防火墙设置、安装Postfix、配置GitLab镜像源、安装及初始化步骤等。

摘要由CSDN通过智能技术生成

环境要求：centos7.6

最低配置：2核cpu、4G内存

但是建议内存最少8G

推荐配置：4核cpu、8G内存

1、GitLab介绍

GitLab是一个用于管理Git存储库的 Web 应用程序。由于它是围绕 Git 构建的，因此它适合管理主要使用纯文本文件的任何项目，例如软件源代码、基于 TeX 的文档或 Markdown 中的会议记录。凭借其内置的问题和 wiki 系统，在某些情况下，它甚至可以成为管理没有任何文件的项目的正确工具。

2、GitLab安装

如果某些步骤已经操作过了，则无需执行，为了防止安装GitLab-CE后需要升级GitLab-EE，这里直接安装GitLab-EE，只要不续费功能就跟CE一样，如果不喜欢EE请更改下载地址或者软件源为CE即可。

2.1 安装SSH依赖

# 更新系统
sudo yum update -y
# 安装SSH协议
sudo yum install -y curl policycoreutils-python openssh-server perl

2.2 启动SSH服务

# 设置SSH服务开机自启动
sudo systemctl enable sshd
# 启动SSH服务
sudo systemctl start sshd
# 查看SSH状态
sudo systemctl status sshd

# 查看SSH启动状态
[root@VM-8-7-centos ~]# sudo systemctl status sshd
● sshd.service - OpenSSH server daemon
   Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor preset: enabled)
   Active: active (running) since Mon 2024-03-25 11:10:09 CST; 7min ago
     Docs: man:sshd(8)
           man:sshd_config(5)
 Main PID: 1632 (sshd)
   CGroup: /system.slice/sshd.service
           └─1632 /usr/sbin/sshd -D

2.3 配置IPv4转发

配置转发
 vim /etc/sysctl.conf
#配置转发
 net.ipv4.ip_forward = 1
#重启服务，让配置生效
 systemctl restart network
#查看是否成功,如果返回为“net.ipv4.ip_forward = 1”则表示成功
sysctl net.ipv4.ip_forward

2.4 安装并启动防火墙

# 安装firewalld防火墙
sudo yum install firewalld systemd -y
# 设置firewalld防火墙自动启动
sudo systemctl enable firewalld
# 启动firewalld防火墙服务
sudo systemctl start firewalld
# 检查firewalld防火墙服务状态
sudo systemctl status firewalld

# 检查firewalld防火墙服务状态
systemctl status firewalld


[root@VM-8-7-centos ~]# sudo systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since Mon 2024-03-25 11:30:25 CST; 4s ago
     Docs: man:firewalld(1)
 Main PID: 15681 (firewalld)
   CGroup: /system.slice/firewalld.service
           └─15681 /usr/bin/python2 -Es /usr/sbin/firewalld  --nofork --nopid

2.5 添加HTTP服务到firewalld

sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https
sudo systemctl reload firewalld

其中，pemmanent 表示永久生效，若不加 --permanent 系统下次启动后就会失效。

2.6 安装Postfix以发送邮件

sudo yum install postfix
sudo systemctl enable postfix
sudo systemctl start postfix
sudo systemctl status postfix

# 查看启动情况
[root@VM-8-7-centos ~]# sudo systemctl status postfix
● postfix.service - Postfix Mail Transport Agent
   Loaded: loaded (/usr/lib/systemd/system/postfix.service; enabled; vendor preset: disabled)
   Active: active (running) since Mon 2024-03-25 11:10:08 CST; 24min ago
 Main PID: 1352 (master)
   CGroup: /system.slice/postfix.service
           ├─1352 /usr/libexec/postfix/master -w
           ├─1374 pickup -l -t unix -u
           └─1375 qmgr -l -t unix -u

将网络协议指定为IP4，以修复PostFix发邮件错误

vim /etc/postfix/main.cf
# 修改inet_protocols = all为
inet_protocols = ipv4
systemctl restart postfix

2.7 添加gitlab镜像

1、将镜像源改为国内源
（1）在 /etc/yum.repos.d 目录下新建 gitlab-ce.repo 文件并保存

# 1.进入目录
cd /etc/yum.repos.d
# 2.新建文件
touch gitlab-ee.repo
# 3.编辑文件
vim gitlab-ee.repo

（2）给文件添加内容（vi：以编辑的方式打开文件，i：插入/编辑，ESC：退出编辑，:wq：保存退出），内容如下：

[gitlab-ee]
name=Gitlab EE Repository
baseurl=https://mirrors.tuna.tsinghua.edu.cn/gitlab-ee/yum/el$releasever/
gpgcheck=0
enabled=1

（3）由于刚刚修改了 yum 源，因此要重新生成缓存，执行：

# 重新生成缓存
yum makecache

2、添加GitLab软件包存储库

curl https://packages.gitlab.com/install/repositories/gitlab/gitlab-ee/script.rpm.sh | sudo bash

2.8 安装gitlab镜像

yum install -y gitlab-ee

或者是通过如下方式：

https://mirrors.cloud.tencent.com/gitlab-ee/yum/el7/

# 直接从tsinghua镜像下载安装包
wget https://mirrors.tuna.tsinghua.edu.cn/gitlab-ee/yum/el7/gitlab-ee-16.11.0-ee.0.el7.x86_64.rpm

# 或从腾讯云镜像下载安装包

wget https://mirrors.cloud.tencent.com/gitlab-ee/yum/el7/gitlab-ee-16.11.0-ee.0.el7.x86_64.rpm

# 安装包gitlab-ee
rpm -i gitlab-ee-16.11.0-ee.0.el7.x86_64.rpm

安装信息：

[root@VM-12-11-centos yum.repos.d]# yum install -y gitlab-ee
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
---> Package gitlab-ee.x86_64 0:16.10.0-ee.0.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

===========================================================================================================
 Package                 Arch                 Version                        Repository               Size
===========================================================================================================
Installing:
 gitlab-ee               x86_64               16.10.0-ee.0.el7               gitlab-ee               1.1 G

Transaction Summary
===========================================================================================================
Install  1 Package

Total download size: 1.1 G
Installed size: 2.9 G
Downloading packages:
gitlab-ee-16.10.0-ee.0.el7.x86_64.rpm                                               | 1.1 GB  00:01:45     
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : gitlab-ee-16.10.0-ee.0.el7.x86_64                                                       1/1 
It looks like GitLab has not been configured yet; skipping the upgrade script.

       *.                  *.
      ***                 ***
     *****               *****
    .******             *******
    ********            ********
   ,,,,,,,,,***********,,,,,,,,,
  ,,,,,,,,,,,*********,,,,,,,,,,,
  .,,,,,,,,,,,*******,,,,,,,,,,,,
      ,,,,,,,,,*****,,,,,,,,,.
         ,,,,,,,****,,,,,,
            .,,,***,,,,
                ,*,.
  


     _______ __  __          __
    / ____(_) /_/ /   ____ _/ /_
   / / __/ / __/ /   / __ `/ __ \
  / /_/ / / /_/ /___/ /_/ / /_/ /
  \____/_/\__/_____/\__,_/_.___/
  

Thank you for installing GitLab!
GitLab was unable to detect a valid hostname for your instance.
Please configure a URL for your GitLab instance by setting `external_url`
configuration in /etc/gitlab/gitlab.rb file.
Then, you can start your GitLab instance by running the following command:
  sudo gitlab-ctl reconfigure

For a comprehensive list of configuration options please see the Omnibus GitLab readme
https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/README.md

Help us improve the installation experience, let us know how we did with a 1 minute survey:
https://gitlab.fra1.qualtrics.com/jfe/form/SV_6kVqZANThUQ1bZb?installation=omnibus&release=16-10

  Verifying  : gitlab-ee-16.10.0-ee.0.el7.x86_64                                                       1/1 

Installed:
  gitlab-ee.x86_64 0:16.10.0-ee.0.el7                                                                      

Complete!

2.9 修改gitlab配置文件

vim  /etc/gitlab/gitlab.rb
# 指定服务器ip和自定义端口
external_url 'http://ip:80'

# 将80端口添加到防火墙中
firewall-cmd --zone=public --add-port=80/tcp --permanent

# 重启防火墙
systemctl reload firewalld

2.10 重置gitlab

gitlab-ctl reconfigure

# 出现下面信息代表重置成功
Notes:
Default admin account has been configured with following details:
Username: root
Password: You didn't opt-in to print initial root password to STDOUT.
Password stored to /etc/gitlab/initial_root_password. This file will be cleaned up in first reconfigure run after 24 hours.

NOTE: Because these credentials might be present in your log files in plain text, it is highly recommended to reset the password following https://docs.gitlab.com/ee/security/reset_user_password.html#reset-your-root-password.

gitlab Reconfigured!

2.11 启动gitlab

gitlab-ctl restart

[root@VM-12-11-centos yum.repos.d]# gitlab-ctl restart
ok: run: alertmanager: (pid 13530) 0s
ok: run: gitaly: (pid 13539) 0s
ok: run: gitlab-exporter: (pid 13555) 1s
ok: run: gitlab-kas: (pid 13601) 0s
ok: run: gitlab-workhorse: (pid 13628) 1s
ok: run: logrotate: (pid 13643) 0s
ok: run: nginx: (pid 13650) 0s
ok: run: node-exporter: (pid 13656) 1s
ok: run: postgres-exporter: (pid 13662) 0s
ok: run: postgresql: (pid 13674) 1s
ok: run: prometheus: (pid 13677) 0s
ok: run: puma: (pid 13695) 0s
ok: run: redis: (pid 13701) 0s
ok: run: redis-exporter: (pid 13709) 1s
ok: run: sidekiq: (pid 13721) 0s

查看初始化密码：

cat /etc/gitlab/initial_root_password

[root@zsx ~]# cat /etc/gitlab/initial_root_password
# WARNING: This value is valid only in the following conditions
#          1. If provided manually (either via `GITLAB_ROOT_PASSWORD` environment variable or via `gitlab_rails['initial_root_password']` setting in `gitlab.rb`, it was provided before database was seeded for the first time (usually, the first reconfigure run).
#          2. Password hasn't been changed manually, either via UI or via command line.
#
#          If the password shown here doesn't work, you must reset the admin password following https://docs.gitlab.com/ee/security/reset_user_password.html#reset-your-root-password.

Password: hMUHtYJppbM4qP/4cqdpNVZLqxfADjTh5pG+wMOwwZI=

# NOTE: This file will be automatically deleted in the first reconfigure run after 24 hours.

请24小时内在GitLab-Password内更改密码，否则失效。

2.13 添加公钥至gitlab

为了安全性考虑，需要创建 public key：

# 在机器上生成public key
ssh-keygen

然后一路回车，中间若出现是否重写选择 Y

cd ~/.ssh
ls
cat id_rsa.pub

复制 id_rsa.pub 文件的 public key：

[root@VM-8-7-centos .ssh]# cat id_rsa.pub
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaN5w4YWW64yt/YgGO24a1SELKmPNUmK92gREEEePCuFp3cJ/IUqci6GpaTMVIZaFkM4sSW09TGRoKGAeA7ExfOQsg3VtMqvRVx8xpzaS9hj9ut4eNieRVXL1UwBHLIXykviTHpOeWS3UWDdrrDmHkLSdJAZyDEkaFqrONzT56cp34kWxBAsfaKNRHTGtSV7gtL2s327ZyCT4Ns72wkRi8KmAKkoYTn+HjzQ+St6W7emRERNq2WibNk+gBFP57hvAQsng2Q7kx58i4LdmYxvxExW1SyFpmaMwlS+pPyjHCmh6qrHo4o21O6SnW116uc3dSFE0aUq78d8nW1+Y5rz5T your_email@example.com

在GitLab-Preferences-SSH Keys点击 Add new key，在Key输入public key，接着点击Add key

2.14 常用的操作命令

# 启动服务
gitlab -ctl start

# 查看状态
gitlab -ctl status

# 停掉服务
gitlab -ctl stop

# 重启服务
gitlab -ctl restart

# 让配置生效
gitlab -ctl reconfigure

至此，GiLab搭建完毕!

m0_69525149

关注

5
点赞
踩
6

收藏

觉得还不错? 一键收藏
2
评论
【保姆级】centos 7 搭建 GitLab-EE

GitLab是一个用于管理Git存储库的 Web 应用程序。由于它是围绕 Git 构建的，因此它适合管理主要使用纯文本文件的任何项目，例如软件源代码、基于 TeX 的文档或 Markdown 中的会议记录。凭借其内置的问题和 wiki 系统，在某些情况下，它甚至可以成为管理没有任何文件的项目的正确工具。
复制链接

扫一扫