Gitlab安装和部署-使用Docker
安装 Gitlab
安装 gitlab-ce 版本，当前最新版本为 17.2.0
配置 external_url
参考 https://docs.gitlab.com/ee/install/docker.html#install-gitlab-using-docker-compose
services: gitlab: image: gitlab/gitlab-ce container_name: gitlab restart: always hostname: 'gitlab.example.com' environment: GITLAB_OMNIBUS_CONFIG: | external_url 'https://gitlab.example.com' ports: - '80:80' - '443:443' - '22:22' volumes: - '/srv/gitlab/config://etc/gitlab' - '/srv/gitlab/logs://var/log/gitlab' - '/srv/gitlab/data://var/opt/gitlab' shm_size: '256m'停止本地的 sshd 和 nginx 服务，避免 22 、80、443端口备占用：
systemctl stop nginxsystemctl stop sshd启动 gitlab：
export GITLAB_HOME=/srv/gitlab && docker compose up -d查看日志：
docker logs -f gitlab本地配置 /etc/host 文件：
127.0.0.1 gitlab.example.com打开浏览器访问：https://gitlab.example.com/ ，用户名 root，密码通过下面命令查看：
cat /srv/gitlab/config/initial_root_password修改默认端口
参考 https://github.com/hutchgrant/gitlab-docker-local/，
services: gitlab: image: gitlab/gitlab-ce container_name: gitlab restart: always hostname: 'gitlab.example.com' environment: GITLAB_OMNIBUS_CONFIG: | external_url 'https://gitlab.example.com:3143' gitlab_rails['gitlab_shell_ssh_port'] = 3122 ports: - '3143:443' - '3122:22' volumes: - '/srv/gitlab/config://etc/gitlab' - '/srv/gitlab/logs://var/log/gitlab' - '/srv/gitlab/data://var/opt/gitlab' shm_size: '256m'配置时区
进入容器，修改配置 /etc/gitlab/gitlab.rb：
# 时区gitlab_rails['time_zone'] = 'Asia/Shanghai'解决头像显示异常问题
# 解决头像显示异常问题gitlab_rails['gravatar_plain_url'] = 'http://cravatar.cn/avatar/%{hash}?s=%{size}&d=identicon'gitlab_rails['gravatar_ssl_url'] = 'https://cravatar.cn/avatar/%{hash}?s=%{size}&d=identicon'关闭不需要的服务
GitLab 默认提供了软件包仓库、容器仓库、软件依赖管理，这些可以使用 Nexus 代替
# 关闭容器仓库功能gitlab_rails['gitlab_default_projects_features_container_registry'] = falsegitlab_rails['registry_enabled'] = falseregistry['enable'] = falseregistry_nginx['enable'] = false
# 关闭包仓库、依赖管理gitlab_rails['packages_enabled'] = falsegitlab_rails['dependency_proxy_enabled'] = false关闭GitLab Pages：
# 关闭GitLab Pagesgitlab_pages['enable'] = falsepages_nginx['enable'] = false关闭监控和性能基准相关功能：
#关闭监控和性能基准相关功能prometheus_monitoring['enable'] = falsealertmanager['enable'] = falsenode_exporter['enable'] = falseredis_exporter['enable'] = falsepostgres_exporter['enable'] = falsepgbouncer_exporter['enable'] = falsegitlab_exporter['enable'] = falsesidekiq['metrics_enabled'] = false
# 关闭使用统计gitlab_rails['usage_ping_enabled'] = falsegitlab_rails['sentry_enabled'] = false关闭 KAS、Terraform、Mattermost：
# GitLab KASgitlab_kas['enable'] = falsegitlab_rails['gitlab_kas_enabled'] = false
# Terraformgitlab_rails['terraform_state_enabled'] = false
# Mattermostmattermost['enable'] = falsemattermost_nginx['enable'] = false
# Kerberosgitlab_rails['kerberos_enabled'] = falsesentinel['enable'] = false关闭电子邮件相关功能：
# 关闭电子邮件相关功能gitlab_rails['smtp_enable'] = falsegitlab_rails['gitlab_email_enabled'] = falsegitlab_rails['incoming_email_enabled'] = false优化 PUMA 和 sidekiq
# 禁用 PUMA 集群模式puma['worker_processes'] = 0puma['min_threads'] = 1puma['max_threads'] = 2
# 降低后台守护进程并发数sidekiq['concurrency'] = 5优化 postgresql
# 减少 postgresql 数据库缓存postgresql['shared_buffers'] = "128MB"# 减少 postgresql 数据库并发数量postgresql['max_connections'] = 60使用自签名证书（不建议）
参考 https://github.com/danieleagle/gitlab-https-docker#generating-a-self-signed-certificate ，生成服务端 key：
sudo openssl genrsa -out server-key.pem 4096生成服务端 csr：
sudo openssl req -new -key server-key.pem -out server.csr生成服务端证书：
sudo openssl x509 -req -days 365 -in server.csr -signkey server-key.pem -out server-cert.pem删除 csr 文件：
sudo rm server.csr拷贝证书文件：
sudo mkdir -p /srv/gitlab/sslsudo cp server-*.pem /srv/gitlab/ssl/修改 docker-compose 文件，添加证书相关配置：
services: gitlab: image: gitlab/gitlab-ce container_name: gitlab restart: always hostname: 'gitlab.example.com' environment: GITLAB_OMNIBUS_CONFIG: | external_url 'https://gitlab.example.com:3143' gitlab_rails['gitlab_shell_ssh_port'] = 3122 nginx['listen_port'] = 443 nginx['redirect_http_to_https'] = true nginx['ssl_certificate'] = "/etc/ssl/certs/gitlab/server-cert.pem" nginx['ssl_certificate_key'] = "/etc/ssl/certs/gitlab/server-key.pem" ports: - '3143:443' - '3122:22' volumes: - '/srv/gitlab/config://etc/gitlab' - '/srv/gitlab/logs://var/log/gitlab' - '/srv/gitlab/data://var/opt/gitlab' shm_size: '256m'为了从主机或网络上的其他地方的 gitlab 克隆，我们需要告诉 git 接受我们的自签名证书。
git config --global http."https://gitlab.example.com:3143/".sslCAInfo /srv/gitlab/ssl/server-cert.pem使用外部 Nginx（建议）
修改配置，禁用 nginx：
services: gitlab: image: gitlab/gitlab-ce container_name: gitlab restart: always hostname: 'gitlab.example.com' environment: GITLAB_OMNIBUS_CONFIG: | external_url 'https://gitlab.example.com' gitlab_rails['gitlab_shell_ssh_port'] = 3122
gitlab_workhorse['listen_network'] = "tcp" gitlab_workhorse['listen_addr'] = "0.0.0.0:8000" nginx['enable'] = false unicorn['enable'] = false ports: - '8000:8000' - '3122:22' volumes: - '/srv/gitlab/config://etc/gitlab' - '/srv/gitlab/logs://var/log/gitlab' - '/srv/gitlab/data://var/opt/gitlab' shm_size: '256m'本地配置 /etc/host 文件：
127.0.0.1 gitlab.example.com127.0.0.1 gitlab-registry.example.com安装 nginx ，为 gitlab.example.com 配置反向代理：
map $http_upgrade $connection_upgrade { default upgrade; '' close;}
server { listen 80; server_name gitlab.example.com; rewrite ^ https://$http_host$request_uri? permanent;}
server { listen 443 ssl; server_name gitlab.example.com; ssl_certificate /etc/nginx/ssl/server-cert.pem; ssl_certificate_key /etc/nginx/ssl/server-key.pem; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; ssl_prefer_server_ciphers on;
client_max_body_size 1g; access_log /var/log/nginx/gitlab.log;
location / { proxy_pass http://127.0.0.1:8000; proxy_read_timeout 90; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme;
# Websocket connection proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; }}拷贝证书文件到 /etc/nginx/ssl/ 目录：
sudo mkdir -p /etc/nginx/ssl/sudo cp server-*.pem /etc/nginx/ssl/使用外部 Redis（可选）
参考 Using a non-packaged Redis instance，进入容器，修改 /etc/gitlab/gitlab.rb
redis['enable'] = falsegitlab_rails['redis_host'] = 'x.x.x.x'gitlab_rails['redis_port'] = 6379使用外部 Postgres（可选）
参考 Using a non-packaged PostgreSQL database management server
在 Postgres 修改 /var/lib/pgsql/data/pg_hba.conf 令其支持密码登录
# "local" is for Unix domain socket connections onlylocal all all peer# IPv4 local connections:host all all 127.0.0.1/32 identhost all all 127.0.0.1/32 md5# IPv6 local connections:host all all ::1/128 identhost all all ::1/128 md5# Allow replication connections from localhost, by a user with the# replication privilege.local replication all peer数据库执行以下 sql 命令：
-- 重新加载 pg_hba.confSELECT pg_reload_conf();
-- 创建 gitlab 角色CREATE ROLE gitlab WITH LOGIN SUPERUSER;ALTER ROLE gitlab PASSWORD 'your-db-passwd';
-- 创建 gitlabhq_production 数据库CREATE DATABASE gitlabhq_production OWNER gitlab;其中，在 gitlab 安装阶段需要赋予其 SUPERUSER 权限，安装完成后可以将该权限去除:
ALTER ROLE gitlab WITH NOSUPERUSER;进入容器，修改 /etc/gitlab/gitlab.rb
postgresql['enable'] = false
gitlab_rails['db_adapter'] = 'postgresql'gitlab_rails['db_database'] = "gitlabhq_production"gitlab_rails['db_encoding'] = 'utf8'gitlab_rails['db_host'] = 'x.x.x.x'gitlab_rails['db_port'] = '5432'gitlab_rails['db_username'] = 'USERNAME'gitlab_rails['db_password'] = 'PASSWORD'数据库名称：gitlabhq_production
使配置生效：
gitlab-ctl reconfigure设置数据库：
# Remove 'sudo' if you are the 'git' usersudo gitlab-rake gitlab:setup完整配置
修改默认端口，配置时区，关闭不需要的服务，优化数据库，使用外部 Nginx：
services: gitlab: image: gitlab/gitlab-ce container_name: gitlab restart: always hostname: 'gitlab.wesine.com.cn' environment: GITLAB_OMNIBUS_CONFIG: | external_url 'https://gitlab.wesine.com.cn' gitlab_rails['gitlab_shell_ssh_port'] = 3122
# 使用外部 Niginx gitlab_workhorse['listen_network'] = "tcp" gitlab_workhorse['listen_addr'] = "0.0.0.0:8000" nginx['enable'] = false unicorn['enable'] = false
# 时区 gitlab_rails['time_zone'] = 'Asia/Shanghai' # 解决头像显示异常问题 gitlab_rails['gravatar_plain_url'] = 'http://gravatar.loli.net/avatar/%{hash}?s=%{size}&d=identicon' gitlab_rails['gravatar_ssl_url'] = 'https://gravatar.loli.net/avatar/%{hash}?s=%{size}&d=identicon'
# 关闭容器仓库功能 gitlab_rails['gitlab_default_projects_features_container_registry'] = false gitlab_rails['registry_enabled'] = false registry['enable'] = false registry_nginx['enable'] = false
# 关闭包仓库、依赖管理 gitlab_rails['packages_enabled'] = false gitlab_rails['dependency_proxy_enabled'] = false
# 关闭GitLab Pages gitlab_pages['enable'] = false pages_nginx['enable'] = false
#关闭监控和性能基准相关功能 prometheus_monitoring['enable'] = false alertmanager['enable'] = false node_exporter['enable'] = false redis_exporter['enable'] = false postgres_exporter['enable'] = false pgbouncer_exporter['enable'] = false gitlab_exporter['enable'] = false sidekiq['metrics_enabled'] = false
# 关闭使用统计 gitlab_rails['usage_ping_enabled'] = false gitlab_rails['sentry_enabled'] = false
# 关闭电子邮件相关功能 gitlab_rails['smtp_enable'] = false gitlab_rails['gitlab_email_enabled'] = false gitlab_rails['incoming_email_enabled'] = false
# GitLab KAS gitlab_kas['enable'] = false gitlab_rails['gitlab_kas_enabled'] = false
# Terraform gitlab_rails['terraform_state_enabled'] = false
# Mattermost mattermost['enable'] = false mattermost_nginx['enable'] = false
# Kerberos gitlab_rails['kerberos_enabled'] = false sentinel['enable'] = false
# 减少 postgresql 数据库缓存 postgresql['shared_buffers'] = "128MB" # 减少 postgresql 数据库并发数量 postgresql['max_connections'] = 60
# 禁用 PUMA 集群模式 puma['worker_processes'] = 0 puma['min_threads'] = 1 puma['max_threads'] = 2
# 降低后台守护进程并发数 sidekiq['concurrency'] = 5
ports: - '8000:8000' - '3122:22' volumes: - '/srv/config://etc/gitlab' - '/srv/logs://var/log/gitlab' - '/srv/data://var/opt/gitlab' shm_size: '256m'
gitlab-runner: image: gitlab/gitlab-runner:latest container_name: gitlab-runner restart: always volumes: - '/srv/gitlab-runner://etc/gitlab-runner' - '/var/run/docker.sock://var/run/docker.sock'将上面文件保存为 gitlab.yaml，然后执行安装命令：
docker compose -f gitlab.yaml up -d启动成功之后，查看容器资源使用情况：
docker stats结果如下：
CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDSf384149bfeab gitlab 0.21% 2.028GiB / 31.26GiB 6.49% 756kB / 4.66MB 246kB / 12.2MB 123febd4b504da8 gitlab-runner 0.00% 21.61MiB / 31.26GiB 0.07% 54kB / 330kB 0B / 0B 10安装 Gitlab Runner
参考 部署gitlab-runner，在 docker-compose.yaml 文件中添加：
gitlab-runner: image: gitlab/gitlab-runner container_name: gitlab-runner restart: always volumes: - '/srv/gitlab-runner://etc/gitlab-runner'在 管理中心 -> CICD -> Runner ，新建实例 Runner，标签名称设置为 docker-runner，记住 Runner 身份验证令牌
进入 github-runner：
docker exec -it gitlab-runner bash复制并粘贴以下命令到您的命令行中，注册 runner。
gitlab-runner register --url https://gitlab.example.com --token glrt-JhEv5bxs4ezxY53uyYizglrt-JhEv5bxs4ezxY53uyYiz为新建 Runner 实例时的 Runner 身份验证令牌
如果提示：couldn't execute POST against https://gitlab.example.com/api/v4/runners/verify: Post "https://gitlab.example.com/api/v4/runners/verify": dial tcp 172.28.0.2:443: connect: connection refused，原因是 gitlab.example.com 这个域名无法通过 DNS 解析。
解决办法两种：
给该域名进行 DNS 解析，这个需要自己注册域名
通过 extra_hosts 添加域名映射，可以参考 https://gitee.com/xuxiaowei-com-cn/GitLab/blob/main/docker-compose.yml
自定义网络并添加别名，参考：https://github.com/hutchgrant/gitlab-docker-local/blob/master/docker-compose.yml
services:gitlab:image: gitlab/gitlab-cecontainer_name: gitlabrestart: alwayshostname: 'gitlab.example.com'environment:GITLAB_OMNIBUS_CONFIG: |external_url 'https://gitlab.example.com'gitlab_rails['gitlab_shell_ssh_port'] = 3122gitlab_workhorse['listen_network'] = "tcp"gitlab_workhorse['listen_addr'] = "0.0.0.0:8000"nginx['enable'] = falseunicorn['enable'] = falseregistry_external_url 'https://gitlab.example.com:4567'registry_nginx['enable'] = falseports:- '8000:8000'- '3122:22'- '4567:4567'networks:dev-net:aliases:- gitlab.example.comvolumes:- '/srv/gitlab/config://etc/gitlab'- '/srv/gitlab/logs://var/log/gitlab'- '/srv/gitlab/data://var/opt/gitlab'shm_size: '256m'gitlab-runner:image: gitlab/gitlab-runnercontainer_name: gitlab-runnerrestart: alwaysvolumes:- '/srv/gitlab-runner://etc/gitlab-runner'networks:- dev-netnetworks:dev-net:external:name: development不使用域名，而是使用 IP:Port，例如：http://192.168.1.107:8000/
注册一个使用 Docker executor 的 runner
参考 使用 Docker 构建 Docker 镜像 。要为 CI/CD 作业启用 Docker 命令，您可以使用：
使用 Docker-in-Docker
sudo gitlab-runner register \ --url https://gitlab.example.com \ --token glrt-JhEv5bxs4ezxY53uyYiz --executor "docker" \ --docker-privileged \ --docker-image docker:stable编辑 /srv/gitlab/gitlab-runner/config.toml ，或者进入容器：
docker exec -it gitlab-runner nano /etc/gitlab-runner/config.toml修改 gitlab url 为 IP:Port，添加 maven 缓存，docker 缓存：
concurrent = 10 # 并行执行作业数check_interval = 0shutdown_timeout = 0connection_max_age = "15m0s"
[session_server] session_timeout = 1800
[[runners]] name = "runner" url = "http://192.168.1.107:8000/" token = "glrt-bEe2isyLds2kaxxS74hP" executor = "docker" [runners.cache] MaxUploadedArchiveSize = 0 [runners.docker] tls_verify = false image = "docker:latest" # 配置默认镜像 privileged = true disable_entrypoint_overwrite = false oom_kill_disable = false disable_cache = false volumes = ["/root/.m2://root/.m2"] # 配置挂载路径 shm_size = 0 network_mtu = 0重启 gitlab-runner：
docker exec -it gitlab-runner gitlab-runner restart使用 Docker Socket
要使 Docker 在镜像上下文中可用，您需要将 /var/run/docker.sock 挂载到启动的容器中。要使用 Docker executor 执行此操作，您需要将 "/var/run/docker.sock://var/run/docker.sock" 添加到 [runners.docker] 部分的卷中。
sudo gitlab-runner register \ --url https://gitlab.example.com \ --token glrt-JhEv5bxs4ezxY53uyYiz --executor "docker" \ --docker-image docker:latest \ --docker-volumes /var/run/docker.sock://var/run/docker.sock修改 /srv/gitlab/gitlab-runner/config.toml ：
concurrent = 10 # 并行执行作业数check_interval = 0shutdown_timeout = 0connection_max_age = "15m0s"
[session_server] session_timeout = 1800
[[runners]] name = "runner" url = "http://192.168.1.107:8000/" token = "glrt-bEe2isyLds2kaxxS74hP" executor = "docker" [runners.cache] MaxUploadedArchiveSize = 0 [runners.docker] tls_verify = false image = "alpine:latest" # 配置默认镜像 privileged = false disable_entrypoint_overwrite = false oom_kill_disable = false disable_cache = false pull_policy = "if-not-present" volumes = ["/etc/docker/daemon.json:ro","/var/run/docker.sock","/root/.m2://root/.m2"] shm_size = 0 network_mtu = 0说明：
在 docker 执行器内是无法访问没有通过 DNS 解析的 gitlab 域名的。需要配置 host 文件，一种方式是挂载 /etc/hosts 文件，另一种方式是添加下面配置：
extra_hosts = ["https://gitlab.example.com:192.168.1.107"]network_mode = "host"配置 docker 镜像加速。将 github runner 容器中的 /etc/docker/daemon.json 挂载到 docker-in-docker 中，/etc/docker/daemon.json 内容如下：
{ "registry-mirrors" : [ "https://docker.1panel.live" ]}Maven 缓存。在 docker 容器挂载 /root/.m2目录。
Maven 镜像加速。在宿主机的 /root/.m2 目录下创建 settings.xml，使用阿里云 Maven 仓库。
<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd"><mirrors><mirror><id>alimaven</id><name>aliyun maven</name><url>http://maven.aliyun.com/nexus/content/groups/public/</url><mirrorOf>central</mirrorOf></mirror></mirrors></settings>
配置 Gitlab
实例配置
默认语言【实例】
管理中心->设置->偏好设置->本地化->默认语言->Chinese, Simplified - 简体中文Admin Area->Settings->Preferences->Localization->Default language->Chinese, Simplified - 简体中文
- 仅对修改此配置后创建的新用户有效
默认语言【用户】
偏好设置->本地化->语言->Chinese, Simplified - 简体中文Preferences->Localization->Language->Chinese, Simplified - 简体中文
启用/禁用允许用户注册
管理中心->设置->通用->注册限制->已启用注册功能Admin Area->Settings->General->Sign-up restrictions->Sign-up enabled
未登录用户重定向地址
管理中心->设置->通用->登录限制->首页URLAdmin Area->Settings->General->Sign-in restrictions->Home page URL
- 将未经身份验证的用户定向到此页面。
限制新建项目可见性
管理中心->设置->通用->可见性与访问控制->限制可见性级别->公开Admin Area->Settings->General->Visibility and access controls->Restricted visibility levels->Public
- Private 私有：如果选中，只有管理员能够创建私有群组、项目和代码片段。
- Internal 内部：如果选中，则只有管理员能够创建内部群组、项目和代码片段。
- Public 公开：如果选中，则只有管理员能够创建公开群组、项目和片段。此外，个人资料仅对经过身份验证的用户可见。
自定义 Git 访问协议
管理中心->设置->通用->可见性与访问控制->启用 Git 访问协议->Only HTTP(S)Admin Area->Settings->General->Visibility and access controls->Enabled Git access protocols->Only HTTP(S)
- Both SSH and HTTP(S)：可以使用 HTTP(S) 或 SSH 检出、推送代码
- Only SSH：只能使用 SSH 检出、推送代码
- Only HTTP(S)：只能使用 HTTP(S) 检出、推送代码
导入和导出设置
管理中心->设置->通用->导入源->GitHub、Bitbucket Cloud、Bitbucket Server、FogBugz、Repository by URL、GitLab export、Gitea、Manifest file、GiteeAdmin Area->Settings->General->Import and export settings->GitHub、Bitbucket Cloud、Bitbucket Server、FogBugz、Repository by URL、GitLab export、Gitea、Manifest file、Gitee
流水线计划的最大数量
管理中心->设置->CI/CD->持续集成和部署->CI/CD 限制->流水线计划的最大数量Admin Area->Settings->CI/CD->Continuous Integration and Deployment->CI/CD limits->Maximum number of pipeline schedules
实例级别环境变量
管理中心->设置->CI/CD->变量->添加变量Admin Area->Settings->CI/CD->Variables->Add variable
| 键 | 值 | 描述 | 说明 |
|---|---|---|---|
SETTINGS_RAW_URL | http://172.25.25.14:48081/repository/raw/settings.xml | 自建 Maven 私库的 settings.xml 配置文件 | 使用 Nexus 搭建了一个 Maven 私库，包含了众多 Maven (镜像)仓库 ，用于加速依赖下载 |
修改初始密码
进入容器：
docker exec -it gitlab bash获取root用户密码：
cat /etc/gitlab/initial_root_password | grep Password运行下面命令修改root默认密码为 abcd1234!：
$ gitlab-rails consoleu=User.where(id:1).firstnew_password='abcd1234!'u.password=new_passwordu.password_confirmation=new_passwordu.save!exit配置系统服务
脚本：
#!/bin/bash
# Create gitlab systemd service# First parameter is the linux account username you want the service run under# Second parameter is the location of your gitlab docker-compose.yml# Example: $ sudo sh gitlab_service.sh LINUXUSER /home/youruser/gitlab-docker-local
echo "[Unit]Description=Gitlab ServiceRequires=docker.serviceAfter=docker.service
[Service]Type=oneshotRemainAfterExit=yesUser=$1WorkingDirectory=$2ExecStart=/usr/local/bin/docker-compose up -dExecStop=/usr/local/bin/docker-compose downTimeoutStartSec=0
[Install]WantedBy=multi-user.target" > /etc/systemd/system/gitlab.service
systemctl start gitlabsystemctl enable gitlab注意：该脚本依赖 Docker Service，所有需要先创建 Docker 系统服务。
运行命令：
# sudo sh gitlab_service.sh LINUXUSER PATH_REPO_FOLDERsudo sh gitlab_service.sh root /opt/docker/gitlab.yaml测试
访问
访问 https://gitlab.example.com，修改默认密码，创建一个测试用户：test
添加 SSH Key
tail ~/.ssh/id_rsa.pub拷贝并保存到 https://gitlab.example.com/profile/keys
创建新项目
创建一个项目 example ，克隆项目：
git clone ssh://git@gitlab.example.com:3122/root/example.git测试添加文件并提交：
cd examplegit add .git commit -m "Initial commit"git push -u origin main备份
备份数据
参考 Official Docs，备份：
docker exec -it gitlab gitlab-rake gitlab:backup:create备份后的文件在 /srv/gitlab/data/backups/ ：
$ ls -l --color=auto /srv/gitlab/data/backups/总用量 532-rw------- 1 chrony polkitd 542720 7月 12 08:57 1720745862_2024_07_12_17.1.1_gitlab_backup.tar备份 Gitlab 配置
参考 recommends storing the configuration backups seperate from your application backups：
sudo sh -c 'umask 0077; tar cfz /data/backups/$(date "+%s-gitlab-config.tgz") -C /srv/gitlab config ssl'备份 Gitlab Runner 配置
sudo sh -c 'umask 0077; tar cfz /data/backups/$(date "+%s-gitlab-runner-ssl.tgz") -C /srv/gitlab-runner .'定时备份
参考 gitlab_backup.sh，备份脚本：
CONTAINER="gitlab"TARGET_DIR="/data/backups"GITLAB_DIR="/srv/gitlab"RUNNER_DIR="/srv/gitlab-runner"REMOVE_DAYS=1
mkdir -p $TARGET_DIR
# Backup Application DATAecho "Backing up GitLab application data"docker exec -t $CONTAINER gitlab-rake gitlab:backup:createcp -u $GITLAB_DIR/backups/. $TARGET_DIR/ -a
# Backup configurations, SSH keys, and SSL certsecho "Backing up GitLab configurations, ssh keys, and ssl certs"sh -c "umask 0077; tar cf $TARGET_DIR/$(date "+%s-gitlab-config.tar") -C $GITLAB_DIR config ssl"sh -c "umask 0077; tar cf $TARGET_DIR/$(date "+%s-gitlab-runner.tar") -C $RUNNER_DIR ."
# Remove files older than x daysecho "Removing files older than $REMOVE_DAYS days"find $TARGET_DIR/*.tar -mtime $REMOVE_DAYS -exec rm {} \;添加定时任务：
sudo crontab -e添加脚本，每天早上 2 点定时执行：
0 2 * * * sh /your/directory/gitlab_backup.sh还原
还原应用数据：
sudo cp /data/backups/1720746362_2024_07_12_17.1.1_gitlab_backup.tar /srv/gitlab/data/backups/docker exec -it gitlab sh -c 'chown git.git /var/opt/gitlab/backups/*.tar'docker exec -it gitlab gitlab-rake gitlab:backup:restore还原配置文件：
sudo tar -xvf /data/backups/1720746535-gitlab-config.tar -C /srv/gitlabdocker exec -it gitlab gitlab-ctl reconfigure还原 Runner 配置文件：
sudo tar -xvf /data/backups/1720746535-gitlab-runner.tar -C /srv/gitlab-runnerdocker exec -it gitlab-runner gitlab-runner restart重启：
docker-compose restart完整脚本：
#!/bin/bash
CONTAINER="gitlab"TARGET_DIR="/srv/gitlab"RUNNER="gitlab-runner"RUNNER_DIR="/srv/gitlab-runner"BACKUP_DIR="/data/backups"
# Restore application datacp $BACKUP_DIR/*_gitlab_backup.tar $TARGET_DIR/data/backups/docker exec -it $CONTAINER sh -c 'chown git.git /var/opt/gitlab/backups/*.tar'docker exec -it $CONTAINER gitlab-rake gitlab:backup:restore
# Restore configurations, ssh keys, SSLtar -xvf $BACKUP_DIR/*-gitlab-config.tar -C $TARGET_DIRdocker exec -it $CONTAINER gitlab-ctl reconfigure
# Restore Gitlab Runnertar -xvf $BACKUP_DIR/*-gitlab-runner.tar -C $RUNNER_DIRdocker exec -it $RUNNER gitlab-runner restart
# Restart all containersdocker-compose restart升级
1、先备份相关文件，特别是数据库
2、修改 docker-compose 文件中 gitlab 版本
3、执行下面命令
docker compose pulldocker compose up -d