gitlab安装

最新推荐文章于 2024-08-04 22:15:20 发布

音符的律动

最新推荐文章于 2024-08-04 22:15:20 发布

阅读量274

点赞数

分类专栏： linux-docker 文章标签： gitlab安装

linux-docker 专栏收录该内容

3 篇文章 0 订阅

订阅专栏

一.Jenkins+Github的环境集成

Jenkins+Github的持续集成环境跳转

A.Gitlab社区版的安装应用

a.Gitlab与GitHub的区别

GitHub 分布式在线代码托管仓库,个人版本可直接在线免费试用,企业版本收费且需要服务器安装(可开源在公网上)
Gitlab 分布式在线代码仓库托管软件,分社区免费版本与企业收费版本,都需要服务器安装

b.Gitlab主要服务构成

Nginx 静态Web服务器(处理https的静态资源访问请求)
Gitlab-workhorse 轻量级的反向代理服务器(处理较大的文件上传下载,例如git push等命令操作)
Gitlab-shell 用于处理Git的常用命令和修改ssh公钥列表
…

c.centos7下gitlab安装前的准备工作

# systemctl status firewalld (关闭防火墙)
# systemctl disable firewalld (禁用防火墙)
关闭SELINUX并重启系统

[root@bogon var]# vim /etc/sysconfig/selinux
...
SELINUX=disabled
...

[root@bogon var]# reboot

d.安装Gitlab组件

 [root@bogon ~]# yum -y install curl policycoreutils openssh-server openssh-clients postfx

e.配置YUM仓库

[root@bogon ~]# curl -sS https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash

f.启动postfix邮件服务(可选)

[root@bogon ~]# systemctl start postfix && systemctl enable postfix

也可访问https://packages.gitlab.com/gitlab/gitlab-ce/packages/el/7/gitlab-ce-11.9.6-ce.0.el7.x86_64.rpm下载
使用yum localinstall /路径/gitlab-ce-**.x86_64.rpm 安装

g.安装Gitlab-ce社区版本

[root@bogon ~]# yum install -y gitlab-ce

B.创建本地证书并加载该证书

创建ssl目录
[root@bogon opt]# mkdir -p /etc/gitlab/ssl

创建本地私有秘钥
[root@bogon opt]# openssl genrsa -out "/etc/gitlab/ssl/gitlab.example.com.key"  2048
Generating RSA private key, 2048 bit long modulus
......................................+++
.............................................+++
e is 65537 (0x10001)

创建私有csr证书
[root@bogon opt]# openssl req -new -key "/etc/gitlab/ssl/gitlab.example.com.key"  -out "/etc/gitlab/ssl/gitlab.example.com.csr"
...
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:cn  #进入安装向导
State or Province Name (full name) []:bj
Locality Name (eg, city) [Default City]:bj
Organization Name (eg, company) [Default Company Ltd]: #输入空格，然后回车
Organizational Unit Name (eg, section) []: #输入空格，然后回车
Common Name (eg, your name or your server's hostname) []:gitlab.example.com
Email Address []:admin@example.com	#输入邮箱

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:123456	#输入密码
An optional company name []:#直接回车

查看证书
[root@bogon ssl]# ll /etc/gitlab/ssl/
total 8
-rw-r--r-- 1 root root 1066 Apr  6 18:20 gitlab.example.com.csr
-rw-r--r-- 1 root root 1679 Apr  6 18:14 gitlab.example.com.key

接下来利用私有密钥和私有证书创建CRT签署证书
[root@bogon ssl]# openssl x509 -req -days 365 -in "/etc/gitlab/ssl/gitlab.example.com.csr" -signkey "/etc/gitlab/ssl/gitlab.example.com.key" -out "/etc/gitlab/ssl/gitlab.example.com.crt"
Signature ok
subject=/C=cn/ST=bj/L=bj/O= /OU= /CN=gitlab.example.com/emailAddress=admin@example.com
Getting Private key
[root@bogon ssl]# ls
gitlab.example.com.crt  gitlab.example.com.csr  gitlab.example.com.key

利用openssl命令输出pem证书
[root@bogon ssl]# openssl dhparam -out /etc/gitlab/ssl/dhparam.pem 2048
[root@bogon ssl]# ls
dhparam.pem  gitlab.example.com.crt  gitlab.example.com.csr  gitlab.example.com.key

更改证书权限
[root@bogon ssl]#  chmod 600 /etc/gitlab/ssl/*
[root@bogon ssl]# ll /etc/gitlab/ssl/
total 16
-rw------- 1 root root  424 Apr  6 18:30 dhparam.pem
-rw------- 1 root root 1265 Apr  6 18:27 gitlab.example.com.crt
-rw------- 1 root root 1066 Apr  6 18:20 gitlab.example.com.csr
-rw------- 1 root root 1679 Apr  6 18:14 gitlab.example.com.key

C.配置Gitlab

[root@bogon ssl]# cp /etc/gitlab/gitlab.rb{,.bak}
[root@bogon ssl]# vim /etc/gitlab/gitlab.rb
1.
将此行: external_url 'http://gitlab.example.com'
改为: external_url 'https://gitlab.example.com'

2.
将此行: # nginx['redirect_http_to_https'] = false
改为(并去掉注释): nginx['redirect_http_to_https'] = true

3.
将此2行: 
# nginx['ssl_certificate'] = "/etc/gitlab/ssl/#{node['fqdn']}.crt"
# nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/#{node['fqdn']}.key"
改为: 
# nginx['ssl_certificate'] = "/etc/gitlab/ssl/gitlab.example.com.crt"
# nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/gitlab.example.com.key"

4.
将此行: # nginx['ssl_dhparam'] = nil # Path to dhparams.pem, eg. /etc/gitlab/ssl/dhparams.pem
改为: # nginx['ssl_dhparam'] = /etc/gitlab/ssl/dhparam.pem # Path to dhparams.pem, eg. /etc/gitlab/ssl/dhparams.pem

D.初始化gitlab相关服务配置与Nginx配置

[root@bogon ssl]# gitlab-ctl reconfigure
.........
Running handlers:
Running handlers complete
Chef Client finished, 473/1268 resources updated in 06 minutes 49 seconds
gitlab Reconfigured!    #到此处说明安装完成

[root@bogon ssl]# cp /var/opt/gitlab/nginx/conf/gitlab-http.conf{,.bak}
[root@bogon ssl]# vim /var/opt/gitlab/nginx/conf/gitlab-http.conf

在此行下:  server_name gitlab.example.com;
添加: rewrite ^(.*)$ https://$host$1 permanent;

重启使加载配置
[root@bogon ssl]# gitlab-ctl restart

在宿主机win10系统下的C:\Windows\System32\drivers\etc\hosts文件中添加如下内容
192.168.244.130 gitlab.example.com
说明:192.168.244.130 (安装git服务器的物理机IP)
使用宿主机win10下的chrome浏览器访问 gitlab.example.com
首次访问需要更改登录密码,默认用户名为root用户