Docker：Gitlab 安装

忘是亡心i 2024-04-20 12:17 71阅读 0赞

#### 1、简述 ####

GitLab是一个Git的代码托管工具，有免费的社区版允许我们在本地搭建代码托管网站，很多公司都会搭建自己的git代码管理库。  
以便管理自己公司内网的代码。  
搭建环境：centos 7 虚拟机

#### 2、准备环境 ####

1、gitlab要求至少4G的内存

[root@localhost ~]# free -m
                  total        used        free      shared  buff/cache   available
    Mem:           5786        4201         147          29        1438        1265
    Swap:             0           0           0

2、准备好Docker容器：[https://blog.csdn.net/lishangke/article/details/112856532][https_blog.csdn.net_lishangke_article_details_112856532]

#### 3、拉取gitlab容器 ####

直接拉取最新的gitlab版本

docker pull gitlab/gitlab-ce

拉取完后直接通过docker启动：

$ sudo docker run -d  -p 8443:443 -p 8090:8090 -p 8022:22 --name gitlab --restart always 
    -v /data/gitlab/config:/etc/gitlab 
    -v /data/gitlab/logs:/var/log/gitlab 
    -v /data/gitlab/data:/var/opt/gitlab gitlab/gitlab-ce

\-d：后台运行  
\-p：将容器内部端口向外映射  
–name：命名容器名称  
\-v：将容器内数据文件夹或者日志、配置等文件夹挂载到宿主机指定目录

#### 4、修改端口映射 ####

在/data/gitlab/config路径中找到gitlab.rb

[root@localhost config]# ls
    gitlab.rb            initial_root_password  ssh_host_ecdsa_key.pub  ssh_host_ed25519_key.pub  ssh_host_rsa_key.pub
    gitlab-secrets.json  ssh_host_ecdsa_key     ssh_host_ed25519_key    ssh_host_rsa_key          trusted-certs

在gitlab.rb配置中添加：

# 配置http协议所使用的访问地址,不加端口号默认为80
    external_url 'http://192.168.220.144:8090'
    # 配置ssh协议所使用的访问地址和端口
    gitlab_rails['gitlab_ssh_host'] = '192.168.220.144'
    # 此端口是run时22端口映射的222端口
    gitlab_rails['gitlab_shell_ssh_port'] = 8022

然后重启gitlab

docker restart gitlab

然后在浏览器上访问：http://192.168.220.144:8090  
![在这里插入图片描述][e5e7827b58b54cefa2741c99457a87aa.png]  
出现这个页面不是失败，Gitlab启动比较慢，要多等一会儿。

#### 5、修改密码 ####

1、root 默认密码放在initial\_root\_password 文件底下，通过以下指令查看

docker exec -it gitlab grep 'Password:' /etc/gitlab/initial_root_password
    find / -name initial_root_password
    cat /data/gitlab/config/initial_root_password

2、修改默认的密码  
首先进入gitlab控制台：

docker exec -it gitlab /bin/bash

接着进入指定的gitlab-rails控制台：

gitlab-rails console -e production

这一步可能等待比较久，多等一下等进入输入控制台  
按步骤一步一步执行：

user =User.find(1)                       					//第一步
    user.password ='123456?'									//第二步
    user.password_confirmation ='123456?'						//第三步
    user.send_only_admin_changed_your_password_notification!	//第四步
    user.save!													//第五步

[root@localhost config]# docker exec -it gitlab /bin/bash
    root@8e97133ab2de:/# gitlab-rails console -e production
    --------------------------------------------------------------------------------
     Ruby:         ruby 2.7.5p203 (2021-11-24 revision f69aeb8314) [x86_64-linux]
     GitLab:       14.6.1 (661d663ab2b) FOSS
     GitLab Shell: 13.22.1
     PostgreSQL:   12.7
    --------------------------------------------------------------------------------
    Loading production environment (Rails 6.1.4.1)
    irb(main):001:0> user =User.find(1)
    => #<User id:1 @root>
    irb(main):002:0> user.password ='123456?'
    => "123456?"
    irb(main):003:0> user.password_confirmation ='123456?'
    => "123456?"
    irb(main):004:0> user.send_only_admin_changed_your_password_notification!
    => true
    irb(main):005:0> user.save!
    => true

然后通过exit退出，在重启gitlab。

#### 6、优化启动速度 ####

因 docker 版本的gitlab 启动会自动启动 prometheus|grafana|alertmanager 和一系列 exporter， 非常占用资源，且导致启动比较慢，因此我们可以通过修改 /etc/gitlab/gitlab.rb 来关闭该功能。  
默认启动包含如下内容：

# ps -ef|grep -E 'prome|exporter|alert|graf'
    git          280     272  0 10:09 ?        00:00:00 /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
    root         350      23  0 10:09 ?        00:00:00 runsv redis-exporter
    root         351      23  0 10:09 ?        00:00:00 runsv gitlab-exporter
    root         352      23  0 10:09 ?        00:00:00 runsv grafana
    root         353      23  0 10:09 ?        00:00:00 runsv postgres-exporter
    root         355      23  0 10:09 ?        00:00:00 runsv alertmanager
    root         356      23  0 10:09 ?        00:00:00 runsv prometheus
    root         357     351  0 10:09 ?        00:00:00 svlogd -tt /var/log/gitlab/gitlab-exporter
    root         358     350  0 10:09 ?        00:00:00 svlogd -tt /var/log/gitlab/redis-exporter
    root         359     352  0 10:09 ?        00:00:00 svlogd -tt /var/log/gitlab/grafana
    gitlab-+     360     352  0 10:09 ?        00:00:00 /opt/gitlab/embedded/bin/grafana-server -config /var/opt/gitlab/grafana/grafana.ini
    gitlab-+     361     350  0 10:09 ?        00:00:00 /opt/gitlab/embedded/bin/redis_exporter --web.listen-address=localhost:9121 --redis.addr=unix:///var/opt/gitlab/redis/redis.socket
    root         362     353  0 10:09 ?        00:00:00 svlogd -tt /var/log/gitlab/postgres-exporter
    git          363     351  0 10:09 ?        00:00:07 /opt/gitlab/embedded/bin/ruby /opt/gitlab/embedded/bin/gitlab-exporter web -c /var/opt/gitlab/gitlab-exporter/gitlab-exporter.yml
    gitlab-+     365     353  0 10:09 ?        00:00:01 /opt/gitlab/embedded/bin/postgres_exporter --web.listen-address=localhost:9187 --extend.query-path=/var/opt/gitlab/postgres-exporter/queries.yaml
    root         366     355  0 10:09 ?        00:00:00 svlogd -tt /var/log/gitlab/alertmanager
    root         368     356  0 10:09 ?        00:00:00 svlogd -tt /var/log/gitlab/prometheus
    gitlab-+     369     356  1 10:09 ?        00:00:12 /opt/gitlab/embedded/bin/prometheus --web.listen-address=localhost:9090 --storage.tsdb.path=/var/opt/gitlab/prometheus/data --config.file=/var/opt/gitlab/prometheus/prometheus.yml
    gitlab-+     370     355  0 10:09 ?        00:00:00 /opt/gitlab/embedded/bin/alertmanager --web.listen-address=localhost:9093 --storage.path=/var/opt/gitlab/alertmanager/data --config.file=/var/opt/gitlab/alertmanager/alertmanager.yml
    root         618     615  0 10:11 ?        00:00:00 tail --follow=name --retry /var/log/gitlab/redis-exporter/current /var/log/gitlab/redis-exporter/state /var/log/gitlab/postgresql/current /var/log/gitlab/postgresql/state /var/log/gitlab/sidekiq/current /var/log/gitlab/sidekiq/state /var/log/gitlab/gitlab-exporter/current /var/log/gitlab/gitlab-exporter/state /var/log/gitlab/gitlab-rails/gitlab-rails-db-migrate-2022-02-10-01-12-10.log /var/log/gitlab/gitlab-rails/exceptions_json.log /var/log/gitlab/gitlab-rails/application.log /var/log/gitlab/gitlab-rails/web_exporter.log /var/log/gitlab/gitlab-rails/application_json.log /var/log/gitlab/gitlab-rails/sidekiq_client.log /var/log/gitlab/gitlab-rails/audit_json.log /var/log/gitlab/gitlab-rails/api_json.log /var/log/gitlab/gitlab-rails/auth.log /var/log/gitlab/gitlab-rails/production.log /var/log/gitlab/gitlab-rails/service_measurement.log /var/log/gitlab/gitlab-rails/graphql_json.log /var/log/gitlab/gitlab-rails/production_json.log /var/log/gitlab/gitlab-rails/git_json.log /var/log/gitlab/gitlab-rails/grpc.log /var/log/gitlab/logrotate/current /var/log/gitlab/grafana/current /var/log/gitlab/grafana/state /var/log/gitlab/postgres-exporter/current /var/log/gitlab/postgres-exporter/state /var/log/gitlab/nginx/gitlab_access.log /var/log/gitlab/nginx/gitlab_error.log /var/log/gitlab/nginx/current /var/log/gitlab/nginx/access.log /var/log/gitlab/nginx/error.log /var/log/gitlab/redis/current /var/log/gitlab/redis/state /var/log/gitlab/alertmanager/current /var/log/gitlab/alertmanager/state /var/log/gitlab/gitlab-workhorse/current /var/log/gitlab/gitlab-workhorse/state /var/log/gitlab/prometheus/current /var/log/gitlab/prometheus/state /var/log/gitlab/sshd/current /var/log/gitlab/gitaly/current /var/log/gitlab/gitaly/gitaly_ruby_json.log /var/log/gitlab/gitaly/state /var/log/gitlab/puma/puma_stderr.log /var/log/gitlab/puma/current /var/log/gitlab/puma/puma_stdout.log /var/log/gitlab/puma/state
    root        2385    1071  0 10:26 pts/0    00:00:00 grep --color=auto -E prome|exporter|alert|graf

通过修改gitlab.rb配置文件：

alertmanager['enable'] = false
    node_exporter['enable'] = false
    redis_exporter['enable'] = false
    postgres_exporter['enable'] = false
    gitlab_exporter['enable'] = false
    prometheus_monitoring['enable'] = false
    grafana['enable'] = false

然后重启启动gitlab，再查看

[root@localhost config]# ps -ef|grep -E 'prome|exporter|alert|graf'
    chrony    96781  96777  0 07:46 ?        00:00:03 /opt/gitlab/embedded/bin/gitlab-workhorse -listenNetwork unix -listenUmask 0 -listenAddr /var/opt/gitlab/gitlab-workhorse/sockets/socket -authBackend http://localhost:8080 -authSocket /var/opt/gitlab/gitlab-rails/sockets/gitlab.socket -documentRoot /opt/gitlab/embedded/service/gitlab-rails/public -pprofListenAddr  -prometheusListenAddr localhost:9229 -secretPath /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret -logFormat json -config config.toml
    root      97762  97761  0 07:55 ?        00:00:00 tail --follow=name --retry /var/log/gitlab/sshd/current /var/log/gitlab/gitlab-rails/gitlab-rails-db-migrate-2022-10-28-09-37-05.log /var/log/gitlab/gitlab-rails/production.log /var/log/gitlab/gitlab-rails/application.log /var/log/gitlab/gitlab-rails/application_json.log /var/log/gitlab/gitlab-rails/grpc.log /var/log/gitlab/gitlab-rails/service_measurement.log /var/log/gitlab/gitlab-rails/auth.log /var/log/gitlab/gitlab-rails/sidekiq_client.log /var/log/gitlab/gitlab-rails/production_json.log /var/log/gitlab/gitlab-rails/api_json.log /var/log/gitlab/gitlab-rails/gitlab-rails-db-migrate-2022-10-28-09-47-20.log /var/log/gitlab/gitlab-rails/exceptions_json.log /var/log/gitlab/logrotate/current /var/log/gitlab/redis/current /var/log/gitlab/gitaly/gitaly_ruby_json.log /var/log/gitlab/gitaly/current /var/log/gitlab/postgresql/current /var/log/gitlab/puma/puma_stdout.log /var/log/gitlab/puma/puma_stderr.log /var/log/gitlab/puma/current /var/log/gitlab/sidekiq/current /var/log/gitlab/gitlab-workhorse/current /var/log/gitlab/nginx/current /var/log/gitlab/nginx/error.log /var/log/gitlab/nginx/gitlab_access.log /var/log/gitlab/nginx/gitlab_error.log /var/log/gitlab/nginx/access.log /var/log/gitlab/gitlab-exporter/current /var/log/gitlab/redis-exporter/current /var/log/gitlab/prometheus/current /var/log/gitlab/alertmanager/current /var/log/gitlab/postgres-exporter/current /var/log/gitlab/grafana/current
    root      98228  92777  0 07:58 pts/1    00:00:00 grep --color=auto -E prome|exporter|alert|graf

重新访问：http://192.168.220.144:8090，出现一下界面代表你安装成功：  
![在这里插入图片描述][5b0df4adce0b426fa057ea4713e18b55.png]

#### 7、配置ssh keys ####

在本地打开git bash 客户端输入ssh-keygen 生成公钥和私钥

ssh-keygen -t rsa -C 'xxx@xxx.com'

lsk1@LAPTOP-0SIF32SL MINGW64 /e/Project/Java_Project/eureka
    $ ssh-keygen
    Generating public/private rsa key pair.
    Enter file in which to save the key (/c/Users/wlsk1/.ssh/id_rsa):   //首次回车
    Enter passphrase (empty for no passphrase): 						//可以输入密码
    Enter same passphrase again:										//再次确认密码
    Your identification has been saved in /c/Users/wlsk1/.ssh/id_rsa.
    Your public key has been saved in /c/Users/wlsk1/.ssh/id_rsa.pub.
    The key fingerprint is:
    SHA256:sGfrvxU09TPXBfyVhMEyN4k/j/a7WSaaPywPSp3gClk wlsk1@LAPTOP-0SIF32SL
    The key's randomart image is:
    +---[RSA 3072]----+
    |            ooBoo|
    |           + B.o+|
    |      .     B .+=|
    |       o   . +  =|
    |      . E . . +  |
    |       = o o = . |
    |      o . o *.o o|
    |       o o o.+o+o|
    |        o.+.o+o=o|

在本地目录c/Users/wlsk1/.ssh/id\_rsa.pub.下查找id\_rsa.pub打开并复制到

![在这里插入图片描述][70c41177d27c428ea6891b1a261b3d50.png]  
接着自己通过Git客户端直接拉取代码就行。

[https_blog.csdn.net_lishangke_article_details_112856532]: https://blog.csdn.net/lishangke/article/details/112856532
[e5e7827b58b54cefa2741c99457a87aa.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/20/0762c74b95a34e7a9c12d7c6bdf56f48.png
[5b0df4adce0b426fa057ea4713e18b55.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/20/8de38bae749c4f1fbbacad0a4c1ba756.png
[70c41177d27c428ea6891b1a261b3d50.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/20/01884850d8c04367a0e909b62bae3240.png