CentOS Git服务安装

安装yum源

yum -y install http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm

vim /etc/yum.repos.d/epel.repo

baseurl去掉注释

注释mirrorlist

安装git环境所需的包

yum -y install libicu-devel patch gcc-c++ readline-devel zlib-devel libffi-devel openssl-devel make autoconf automake libtool bison libxml2-devel libxslt-devel libyaml-devel zlib-devel openssl-devel cpio expat-devel gettext-devel curl-devel perl-ExtUtils-CBuilder perl-ExtUtils-MakeMaker

移除机器上现有的git ruby

yum -y remove git ruby

安装git

mkdir /tmp/git && cd /tmp/git

wget https://www.kernel.org/pub/software/scm/git/git-1.8.4.1.tar.gz

tar -zxvf git-1.8.4.1.tar.gz

cd git-1.8.4.1/

make prefix=/usr/local all

make prefix=/usr/local install

ln -fs /usr/local/bin/git* /usr/bin/

安装ruby

mkdir /tmp/ruby && cd /tmp/ruby

curl --progress ftp://ftp.ruby-lang.org/pub/ruby/2.0/ruby-2.0.0-p353.tar.gz | tar xz

cd ruby-2.0.0-p353/

./configure --disable-install-rdoc

make && make install

gem source -r https://rubygems.org/

gem source -a http://ruby.taobao.org/

gem install bundler --no-ri --no-rdoc

ln -s /usr/local/bin/ruby /usr/bin/ruby

ln -s /usr/local/bin/gem /usr/bin/gem

ln -s /usr/local/bin/bundle /usr/bin/bundle

新建git账号并允许sudo

useradd --comment 'GitLab' git

echo "git ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers

安装git-shell

su - git

sudo -u git -H git clone https://gitlab.com/gitlab-org/gitlab-shell.git -b v1.8.0

cd gitlab-shell/

sudo -u git -H cp config.yml.example config.yml

vim config.yml

修改gitlab域名

gitlab_url: "http://localhost/"

如：

gitlab_url: "http://gitlab.example.com/“

:wq!

sudo -u git -H ./bin/install

使用mysql并建立gitlab数据库，本机如果没有mysql直接yum安装即可

sudo yum -y install mysql mysql-devel mysql-server

sudo /etc/init.d/mysqld start

mysql -uroot -p

CREATE USER 'gituser'@'localhost' IDENTIFIED BY 'gitpasswd';

CREATE DATABASE IF NOT EXISTS `gitlabhq_production` DEFAULT CHARACTER SET `utf8` COLLATE `utf8_unicode_ci`;

GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, INDEX, ALTER ON `gitlabhq_production`.*TO 'gituser'@'localhost';

\q

测试gituser登陆数据库是否正常

sudo -u git -H mysql -u gituser -p -D gitlabhq_production

安装redis

sudo yum -y install redis

sudo /etc/init.d/redis start

sudo chkconfig redis on

安装gitlab

cd /home/git

sudo -u git -H git clone https://gitlab.com/gitlab-org/gitlab-ce.git -b 6-4-stable gitlab

cd /home/git/gitlab

sudo -u git -H cp config/gitlab.yml.example config/gitlab.yml

vim config/gitlab.yml

修改git域名，上面git-shell配置文件里面定义的

gitlab:

  ## Web server settings

  host: gitlab.example.com

  port: 80

  https: false

修改git path

git:

  bin_path: /usr/local/bin/git

:wq!

添加相应文件的权限、新建必要的文件及复制配置文件

chown -R git log/

chown -R git tmp/

chmod -R u+rwX  log/

chmod -R u+rwX  tmp/

sudo -u git -H mkdir /home/git/gitlab-satellites

sudo -u git -H mkdir tmp/pids/

sudo -u git -H mkdir tmp/sockets/

sudo chmod -R u+rwX tmp/pids/

sudo chmod -R u+rwX tmp/sockets/

sudo -u git -H mkdir public/uploads

sudo chmod -R u+rwX public/uploads/

sudo -u git -H cp config/unicorn.rb.example config/unicorn.rb

sudo -u git -H cp config/initializers/rack_attack.rb.example config/initializers/rack_attack.rb

设置gitlab全局账号

sudo -u git -H git config --global user.name "GitLab"

sudo -u git -H git config --global user.email "gitlab@localhost"

sudo -u git -H git config --global core.autocrlf input

设置数据库连接文件信息，如下是我数据库信息配置：

sudo -u git cp config/database.yml.mysql config/database.yml

sudo -u git -H vim config/database.yml

#

# PRODUCTION

#

production:

  adapter: mysql2

  encoding: utf8

  reconnect: false

  database: gitlabhq_production

  pool: 10

  username: gituser

  password: "gitpasswd”

  # host: localhost

  # socket: /tmp/mysql.sock

#

# Development specific

#

development:

  adapter: mysql2

  encoding: utf8

  reconnect: false

  database: gitlabhq_development

  pool: 5

  username: gituser

  password: "gitpasswd”

  # socket: /tmp/mysql.sock

# Warning: The database defined as "test" will be erased and

# re-generated from your development database when you run "rake".

# Do not set this db to the same as development or production.

test: &test

  adapter: mysql2

  encoding: utf8

  reconnect: false

  database: gitlabhq_test

  pool: 5

  username: gituser

  password: "gitpasswd”

  # socket: /tmp/mysql.sock

安装gems

cd /home/git/gitlab

vim Gemfile

修改source "https://rubygems.org/"

为source "http://ruby.taobao.org/"

vim Gemfile.lock

修改remote: https://rubygems.org/

为remote: http://ruby.taobao.org/

:wq

sudo -u git -H bundle install --deployment --without development test postgres aws

如出现此类错误Could not find modernizr-2.6.2 in any of the sources，则修改：

vim Gemfile

修改:gem "modernizr",        "2.6.2"

为gem "modernizr-rails",  "2.7.1"

:wq

vim Gemfile.lock

修改:modernizr (2.6.2)

为:modernizr-rails (2.7.1)

修改:modernizr (= 2.6.2)

为:modernizr-rails (= 2.7.1)

:wq

再次运行：sudo -u git -H bundle install --deployment --without development test postgres aws

初始化数据库

sudo -u git -H bundle exec rake gitlab:setup RAILS_ENV=production

Do you want to continue (yes/no)? yes

初始化完成后最后两行就是你gitlab默认的用户名密码

配置启动及日志切割文件

sudo cp lib/support/init.d/gitlab /etc/init.d/gitlab

sudo cp lib/support/init.d/gitlab.default.example /etc/default/gitlab

sudo cp lib/support/logrotate/gitlab /etc/logrotate.d/gitlab

测试环境信息

sudo -u git -H bundle exec rake gitlab:env:info RAILS_ENV=production

安装nginx

sudo yum -y install nginx

以下是我nginx主配置文件内容

cat /etc/nginx/nginx.conf | grep -v "^#" | grep -v "^$"

user              root git;

worker_processes  2;

pid        /var/run/nginx.pid;

events {

    worker_connections  1024;

}

http {

    include       /etc/nginx/mime.types;

    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '

                      '$status $body_bytes_sent "$http_referer" '

                      '"$http_user_agent" "$http_x_forwarded_for"';

upstream gitlab {

    server unix:/home/git/gitlab/tmp/sockets/gitlab.socket;

}

server {

    listen *:80 default_server;

    server_name gitlab.example.com;

    server_tokens off;

    root /home/git/gitlab/public;

    client_max_body_size 5m;

    access_log  /var/log/nginx/gitlab_access.log;

    error_log   /var/log/nginx/gitlab_error.log;

    location / {

        try_files $uri $uri/index.html $uri.html @gitlab;

    }

    location @gitlab {

        proxy_read_timeout 300;

        proxy_connect_timeout 300;

        proxy_redirect     off;

        proxy_set_header   X-Forwarded-Proto $scheme;

        proxy_set_header   Host              $http_host;

        proxy_set_header   X-Real-IP         $remote_addr;

        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;

        proxy_pass http://gitlab;

    }

}

    #tcp_nopush     on;

    #keepalive_timeout  0;

    #gzip  on;

    

    # Load config files from the /etc/nginx/conf.d directory

    # The default server is in conf.d/default.conf

}

更改权限及启动nginx

sudo nginx -t

sudo chown -R git.git /var/lib/nginx/

sudo /etc/init.d/nginx start

拉取gitlab静态资源文件

cd /home/git/gitlab

sudo -u git -H bundle exec rake assets:precompile RAILS_ENV=production

启动gitlab

sudo /etc/init.d/gitlab start

检查各个组件是否正常工作

sudo -u git -H bundle exec rake gitlab:check RAILS_ENV=production

一切正常的话 使用你的浏览器访问gitlab吧（域名访问，修改hosts文件先）

http://gitlab.example.com

账号密码为上面初始化数据后显示的账号密码

admin@local.host/5iveL!fe

客户端首次git clone正常git push后报类似以下错误：

fatal: protocol error: bad line length character: 12e

fatal: The remote end hung up unexpectedly

之后在别的地方git clone失败

nginx访问日志报类似以下信息：

10.0.0.5 - - [02/Sep/2014:17:22:50 +0800] "GET /root/testops.git/info/refs?service=git-upload-pack HTTP/1.1" 200 282 "-" "git/1.9.3 (Apple Git-50)"

10.0.0.5 - - [02/Sep/2014:17:22:50 +0800] "POST /root/testops.git/git-upload-pack HTTP/1.1" 200 726 "-" "git/1.9.3 (Apple Git-50)"

解决：

gitlab和nginx版本兼容上出现问题，升级nginx版本到nginx1.6.0问题解决

本机mail对外发送邮件正常，gitlab发送失败，/var/log/maillog显示类似以下错误：

Jan  8 15:04:04 centos01 sendmail[7374]: t08741Sq007372: to=<xxxxx@126.com>, delay=00:00:03, xdelay=00:00:00, mailer=esmtp, pri=122161, relay=qiye163mx01.mxmail.netease.com. [220.181.97.145], dsn=5.0.0, stat=Service unavailable

Jan  8 15:04:04 centos01 sendmail[7374]: t08741Sq007372: t08744Sq007374: DSN: Service unavailable

Jan  8 15:07:41 centos01 sendmail[7573]: t083rICS007905: to=<example@example.com>, delay=03:14:23, xdelay=00:00:00, mailer=esmtp, pri=753386, relay=example.com., dsn=4.0.0, stat=Deferred: Connection timed out with example.com.

修改example@example.com为本机可识别的地址，如：

vim /home/git/gitlab/config/gitlab.yml

替换example@example.com为/home/git/.gitconfig里面的邮件地址，就是上文“设置gitlab全局账号”下的邮箱地址

git push报以下错误：

localhost:test guwenqiang$ git push -u origin master

Counting objects: 4, done.

Delta compression using up to 4 threads.

Compressing objects: 100% (3/3), done.

Writing objects: 100% (3/3), 1.06 MiB | 0 bytes/s, done.

Total 3 (delta 1), reused 0 (delta 0)

fatal: The remote end hung up unexpectedly

fatal: The remote end hung up unexpectedly

Everything up-to-date

push文件过大导致，解决方法如下：

客户端（push报错机器）执行：

linux：

git config http.postBuffer 524288000

windows:

在.git/config 文件中加入

[http]

postBuffer = 524288000

git clone报错如下：

Cloning into 'opstest'...

remote: Not Found

fatal: repository 'http://git.inner-dev.sincestar.com/guwenqiang/opstest.git/' not found

解决：

拉取gitlab-ssl文件至/etc/nginx/sites-available/gitlab

gitlab-ssl信息（）：

域名换为git.domob-inc.cn

cat sites-available/gitlab | grep -v "^{#" | grep -v "}$"

upstream gitlab {

server unix:/home/git/gitlab/tmp/sockets/gitlab.socket;

}

server {

listen *:80 default_server;

server_name gitlab.example.com; ## Replace this with something like gitlab.example.com

server_tokens off; ## Don't show the nginx version number, a security best practice

root /nowhere; ## root doesn't have to be a valid path since we are redirecting

rewrite ^{https://$server_name$request_uri permanent;}

}

server {

listen 443 ssl;

server_name YOUR_SERVER_FQDN; ## Replace this with something like gitlab.example.com

server_tokens off;

root /home/git/gitlab/public;

## Increase this if you want to upload large p_w_uploads

## Or if you want to accept large git objects over http

client_max_body_size 20m;

## Strong SSL Security

## https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html

ssl on;

ssl_certificate /etc/nginx/ssl/gitlab.crt;

ssl_certificate_key /etc/nginx/ssl/gitlab.key;

ssl_ciphers 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4';

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_session_cache builtin:1000 shared:SSL:10m;

ssl_prefer_server_ciphers on;

add_header Strict-Transport-Security max-age=63072000;

add_header X-Frame-Options DENY;

add_header X-Content-Type-Options nosniff;

## Individual nginx logs for this GitLab vhost

access_log /var/log/nginx/gitlab_access.log;

error_log /var/log/nginx/gitlab_error.log;

location / {

## Serve static files from defined root folder.

## @gitlab is a named location for the upstream fallback, see below.

try_files $uri $uri/index.html $uri.html @gitlab;

}

## If a file, which is not found in the root folder is requested,

## then the proxy pass the request to the upsteam (gitlab unicorn).

location @gitlab {

## If you use https make sure you disable gzip compression

## to be safe against BREACH attack.

gzip off;

## https://github.com/gitlabhq/gitlabhq/issues/694

## Some requests take more than 30 seconds.

proxy_read_timeout 300;

proxy_connect_timeout 300;

proxy_redirect off;

proxy_set_header Host $http_host;

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-Ssl on;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

proxy_set_header X-Forwarded-Proto $scheme;

proxy_set_header X-Frame-Options SAMEORIGIN;

proxy_pass http://gitlab;

}

## Enable gzip compression as per rails guide:

## http://guides.rubyonrails.org/asset_pipeline.html#gzip-compression

## WARNING: If you are using relative urls do remove the block below

## See config/application.rb under "Relative url support" for the list of

## other files that need to be changed for relative url support

location ~ ^{/(assets)/ {}

root /home/git/gitlab/public;

gzip_static on; # to serve pre-gzipped version

expires max;

add_header Cache-Control public;

}

error_page 502 /502.html;

}

ln -sf /etc/nginx/sites-available/gitlab /etc/nginx/sites-enabled/gitlab

重启gitlab nginx服务即可

git push报错如下：

Counting objects: 3, done.

Delta compression using up to 4 threads.

Compressing objects: 100% (2/2), done.

Writing objects: 100% (3/3), 256 bytes | 0 bytes/s, done.

Total 3 (delta 0), reused 0 (delta 0)

remote: /usr/local/lib/ruby/gems/2.1.0/gems/bundler-1.3.1/lib/bundler/runtime.rb:216: warning: Insecure world writable dir /data in PATH, mode 040777

remote: GitLab: You are not allowed to access master!

remote: error: hook declined to update refs/heads/master

To http://git.inner-dev.sincestar.com/guwenqiang/opstest.git

 ! [remote rejected] master -> master (hook declined)

error: failed to push some refs to 'http://git.inner-dev.sincestar.com/guwenqiang/opstest.git'

解决：

上面一共报了两个地方的错误：

1、提示已经说明/data目录权限不安全，ll看后发现权限为777，改为755第一个错误解决。

2、链接出错，删除/data/home/git/gitlab-shell/hooks/update文件

问题：

gitlab升级后访问网页端界面布局全乱了

解决：

service gitlab stop

cd /home/git/gitlab

sudo -u git -H bundle exec rake assets:clean assets:precompile cache:clear RAILS_ENV=production

service gitlab start

转载于:https://blog.51cto.com/guwenqiang/1577067