详情查看:
https://docs.gitlab.com/ee/raketasks/backup_restore.html#when-the-secrets-file-is-lost
原因:
迁移gitlab迁移时备份恢复后报aes256_gcm_decrypt是因为敏感数据的加密密钥发生变化或密钥丢失了,重置密钥修复数据即可。
对于使用rpm方式安装的gitlab(版本大于等于14.1),按官方提示的具体操作
注意,执行操作前备份gitlab以防万一
gitlab-rake gitlab:backup:create
1、登录数据库
sudo gitlab-rails dbconsole --database main
2、删除变量
DELETE FROM ci_group_variables;
DELETE FROM ci_variables;
3、清除token
-- 清除project tokens
UPDATE projects SET runners_token = null, runners_token_encrypted = null;
-- 清除group tokens
UPDATE namespaces SET runners_token = null, runners_token_encrypted = null;
-- 清除instance tokens
UPDATE application_settings SET runners_registration_token_encrypted = null;
-- 清除 key used for JWT authentication
UPDATE application_settings SET encrypted_ci_jwt_signing_key = null;
-- 清除 runner tokens
UPDATE ci_runners SET token = null, token_encrypted = null;
无需重启数据库和gitlab即可正常使用。