docker-compose部署gitlab

参考官方安装方法：Install GitLab using Docker Compose

安装

安装docker-compose

docker及docker-compose安装

docker-compose安装Gitlab

• 编排文件

vim docker-compose.yml

version: '3.6'
services:
  web:
    image: 'gitlab/gitlab-ce:latest'   # 默认最新镜像，亦可指定版本
    container_name: gitlab
    restart: unless-stopped
    privileged: true
    hostname: 'gitlab.l2c.com'
    environment:
      TZ: 'Asia/Shanghai'
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'http://gitlab.l2c.com'  #项目clone地址,需与hostname一致，默认80端口
        gitlab_rails['time_zone'] = 'Asia/Shanghai'
        gitlab_rails['gitlab_shell_ssh_port'] = 2222
    ports:
      - '80:80'      #默认80 自定义主机端口时需同步修改external_url
      - '443:443'
      - '2222:22'    
    volumes:
      - '/data/gitlab/config:/etc/gitlab'
      - '/data/gitlab/data:/var/opt/gitlab'
      - '/data/gitlab/logs:/var/log/gitlab'

• 部署，启动需约2~4分钟

# 部署
docker-compose up -d

# 查看状态
docker ps -a |grep gitlab

# 停止
docker-compose down

• 登录：
  • 通过IP访问
  • 配置hosts后通过域名访问
• 获取root初始密码，24小时后失效，需及时修改密码

docker exec -it gitlab grep 'Password:' /etc/gitlab/initial_root_password

更多配置

IP地址登录

version: '3.6'
services:
  web:
    image: 'gitlab/gitlab-ce:latest'   # 默认最新镜像，亦可指定版本
    container_name: gitlab
    restart: unless-stopped
    privileged: true
    hostname: 'gitlab'
    environment:
      TZ: 'Asia/Shanghai'
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'http://192.168.17.200'  #项 本机IP地址
        gitlab_rails['time_zone'] = 'Asia/Shanghai'
        gitlab_rails['gitlab_shell_ssh_port'] = 2222
    ports:
      - '80:80'      #默认80 自定义主机端口时需不同修改external_url
      - '443:443'
      - '2222:22'    
    volumes:
      - '/data/gitlab/config:/etc/gitlab'
      - '/data/gitlab/data:/var/opt/gitlab'
      - '/data/gitlab/logs:/var/log/gitlab'

自定义端口

version: '3.6'
services:
  web:
    image: 'gitlab/gitlab-ce:latest'   # 默认最新镜像，亦可指定版本
    container_name: gitlab
    restart: unless-stopped
    privileged: true
    hostname: 'gitlab.l2c.com'
    environment:
      TZ: 'Asia/Shanghai'
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'http://gitlab.l2c.com:8888'  #项目clone地址,需与hostname一致，默认80端口
        gitlab_rails['time_zone'] = 'Asia/Shanghai'
        gitlab_rails['gitlab_shell_ssh_port'] = 2222
    ports:
      - '8888:8888'      #自定义端口
      - '443:443'
      - '2222:22'    
    volumes:
      - '/data/gitlab/config:/etc/gitlab'
      - '/data/gitlab/data:/var/opt/gitlab'
      - '/data/gitlab/logs:/var/log/gitlab'

配置邮箱+logging

参考自：gitlab配置邮件服务（QQ邮箱）图解教程

启用邮箱后需手动修改管理员默认邮箱

在docker-compose编排文件中配置

version: '3.6'
services:
  web:
    image: 'gitlab/gitlab-ce:latest'   # 默认最新镜像，亦可指定版本
    container_name: gitlab
    restart: unless-stopped
    privileged: true
    hostname: 'gitlab.l2c.com'
    environment:
      TZ: 'Asia/Shanghai'
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'http://gitlab.l2c.com'  #项目clone地址,需与hostname一致，默认80端口
        gitlab_rails['time_zone'] = 'Asia/Shanghai'
        gitlab_rails['gitlab_shell_ssh_port'] = 2222
        gitlab_rails['smtp_enable'] = true
        gitlab_rails['smtp_address'] = "smtp.qq.com"
        gitlab_rails['smtp_port'] = 465
        gitlab_rails['smtp_user_name'] = "[e-mail]"  # 用自己的邮箱
        gitlab_rails['smtp_password'] = "xxxxxxxx"   # 开启smtp后生成的授权码
        gitlab_rails['smtp_domain'] = "smtp.qq.com"
        gitlab_rails['smtp_authentication'] = "login"
        gitlab_rails['smtp_enable_starttls_auto'] = true
        gitlab_rails['smtp_tls'] = true
        gitlab_rails['gitlab_email_from'] = '[e-mail]'
        alertmanager['admin_email'] = '[e-mail]'   # 设置管理员邮箱
    ports:
      - '80:80'      #默认80 自定义主机端口时需不同修改external_url
      - '443:443'
      - '2222:22'
    volumes:
      - '/data/gitlab/config:/etc/gitlab'
      - '/data/gitlab/data:/var/opt/gitlab'
      - '/data/gitlab/logs:/var/log/gitlab'
    logging:
      driver: "json-file"
      options:
        max-size: "200m"
        max-file: "10"

docker-compose up -d

在持久化文件中配置

vim /data/gitlab/config/gitlab.rb
# 编辑邮箱配置

• 进入容器，重载配置

# 进入gitlab容器
docker exec -it gitlab /bin/bash

# 重载配置
gitlab-ctl reconfigure

• 测试

# 进入控制台(需要一点时间)
gitlab-rails console

# 发送测试邮件
Notify.test_email('[e-mail]','gitlab邮箱测试','gitlab邮箱测试').deliver_now

配置SSL

生成HTTPS访问证书

• 创建证书存放目录

mkdir -p ./ssl 
cd ./ssl 

• 创建证书

openssl req  -newkey rsa:4096 -nodes -sha256 -keyout ca.key -x509 -days 3650 -out ca.crt

# 一路回车出现Common Name 输入（因为是CA，可不输入IP或域名）：L2C Cert Root CA  
# L2C为自定义名称

• 生成证书签名请求

openssl req  -newkey rsa:4096 -nodes -sha256 -keyout gitlab.key -out gitlab.csr

# 一路回车出现Common Name 输入IP或域名：l2c.com

• 新建extfile.cnf

vim extfile.cnf

subjectAltName = @alt_names
extendedKeyUsage = serverAuth

[alt_names]
# 域名，如有多个用DNS.2,DNS.3…来增加
DNS.1 = l2c.com
DNS.2 = *.l2c.com
# IP地址, 服务器的ip
IP.1 = 192.168.17.200
IP.2 = 127.0.0.1

• 生成证书

openssl x509 -req -days 3650 -in gitlab.csr -CA ca.crt -CAkey ca.key -CAcreateserial -extfile extfile.cnf -out gitlab.crt

• 分发证书至其它节点

scp ca.crt root@[IP]:/etc/pki/ca-trust/source/anchors/

• 更新证书配置

update-ca-trust extract

配置HTTPS

• 将证书拷贝至持久化目录

mkdir -p /data/gitlab/config/trusted-certs
cp gitlab.crt gitlab.key /data/gitlab/config/trusted-certs

• 配置

version: '3.6'
services:
  web:
    image: 'gitlab/gitlab-ce:latest'   # 默认最新镜像，亦可指定版本
    container_name: gitlab
    restart: unless-stopped
    privileged: true
    hostname: 'gitlab.l2c.com'
    environment:
      TZ: 'Asia/Shanghai'
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'https://gitlab.l2c.com'  #项目clone地址,需与hostname一致，默认80端口
        nginx['redirect_http_to_https']= true   #取消注释改为 true
        nginx['ssl_certificate'] = "/etc/gitlab/trusted-certs/gitlab.crt"    #放置对应的证书密钥
        nginx['ssl_certificate_key'] = "/etc/gitlab/trusted-certs/gitlab.key" #放置对应的证书密钥
        gitlab_rails['time_zone'] = 'Asia/Shanghai'
        gitlab_rails['gitlab_shell_ssh_port'] = 2222
        gitlab_rails['smtp_enable'] = true
        gitlab_rails['smtp_address'] = "smtp.qq.com"
        gitlab_rails['smtp_port'] = 465
        gitlab_rails['smtp_user_name'] = "[e-mail]"  # 用自己的邮箱
        gitlab_rails['smtp_password'] = "xxxxxxxx"   # 开启smtp后生成的授权码
        gitlab_rails['smtp_domain'] = "qq.com"
        gitlab_rails['smtp_authentication'] = "login"
        gitlab_rails['smtp_enable_starttls_auto'] = true
        gitlab_rails['smtp_tls'] = true
        gitlab_rails['gitlab_email_from'] = '[e-mail]'
    ports:
      - '80:80'      #默认80 自定义主机端口时需不同修改external_url
      - '443:443'
      - '2222:22'
    volumes:
      - '/data/gitlab/config:/etc/gitlab'
      - '/data/gitlab/data:/var/opt/gitlab'
      - '/data/gitlab/logs:/var/log/gitlab'
    logging:
      driver: "json-file"
      options:
        max-size: "200m"
        max-file: "10"

重置root密码

git使用

配置全局用户名和邮箱

# 查看配置
git config --list

git config --global user.name "xxx"
git config --global user.email [e-mail]

配置用户名和密码

# 启用store模式，输入密码后，会以明文形式默认保存于~/.git-credentials
git config --global credential.helper store