Gitlab安装和配置管理
- 安装omnibus Gitlab-paceage
yum -y install curl policycoreutils openssh-server openssh-clients postfix
- 配置Yum仓库
curl -Ss https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | bash
- 启动postfix邮件服务
systemctl start postfix && systemctl enable postfix
- 安装Gitlab-ce社区版本
yum install -y gitlab-ce
- 关闭防火墙
systemctl status firewalld
- 关闭selinux
vim /etc/sysconfig/selinux
- omnibus Gitlab等相关配置初始化并完成安装
1.证书创建和配置加载
#make -p /etc/gitlab/ssl
#openssl genrsa -out "/etc/gitlab/ssl/gitlab.example.com.key" 2048
#openssl req -new -key "/etc/gitlab/ssl/gitlab.example.com.key" -out "/etc/gitlab/ssl/gitlab.example.com.csr"
#openssl genrsa -out "/etc/gitlab/ssl/gitlab.example.com.key" 2048
#openssl x509 -req -days 365 -in "/etc/gitlab/ssl/gitlab.example.com.csr" -signkey "/etc/gitlab/ssl/gitlab.example.com.key" -out "/etc/gitlab/ssl/gitlab.example.com.crt"
#openssl dhparam -out /etc/gitlab/ssl/dhparams.pem 2048
#chmod 600 * 修改本地证书权限
vim /etc/gitlab/gitlab.rb
找到external_url 'http://gitlab.example.com' 并将http://gitlab.example.com 改成https://gitlab.example.com
修改证书的文件路径为实际的路径:
2.nginx SSL代理服务配置
vim /var/opt/gitlab/nginx/conf/gitlab-http.conf
3.初始化Gitlab相关服务并完成安装
#gitlab-ctl reconfigure
4.登录gitlab , 另外还需在登录gitlab.example.com的本地机器上绑定下host