GitLab（极狐）的部署和配置

535 字

3 分钟

GitLab（极狐）的部署和配置

2024-12-29

建站

gitlab

安装#

IMPORTANT
建议参考英文教程：https://about.gitlab.com/

Enable SSH and open firewall ports#

1
sudo systemctl enable --now ssh
2
sudo ufw allow 22/tcp
3
sudo ufw allow 80/tcp
4
sudo ufw allow 443/tcp
5
sudo ufw enable

Add the GitLab package repository#

1
sudo apt update
2
sudo apt install -y curl
3
curl "https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.deb.sh" | sudo bash

推荐镜像源：MirrorZ Help

Install the package#

1
sudo apt update
2
sudo EXTERNAL_URL="https://gitlab.example.com" apt install gitlab-ce
3
# or
4
sudo GITLAB_ROOT_EMAIL="admin@example.com" GITLAB_ROOT_PASSWORD="strongpassword" EXTERNAL_URL="https://gitlab.example.com" apt install gitlab-ce

升级#

常见问题#

从 jh 迁移到 ce 或 ee#

创建备份，备份结果在 /var/opt/gitlab/backups/：

1
sudo gitlab-rake gitlab:backup:create

查询 gitlab-jh 版本，例如 17.6.0-jh：

1
cat /opt/gitlab/embedded/service/gitlab-rails/VERSIO

安装指定版本的 gitlab-ce/ee：

方法1：参考之前的安装过程增加软件源，并安装指定版本的 gitlab-ce：sudo apt install gitlab-ce=17.6.0
方法2：从 https://packages.gitlab.com/gitlab/gitlab-ce 获取并安装指定版本的 deb 安装包

安装完成后，先修改 gitlab-ce 的版本标识符：

1
vim /opt/gitlab/embedded/service/gitlab-rails/VERSIO
2
# 将版本从 17.6.0 改为 17.6.0-jh，不然备份还原不了

修改完成后，使用以下指令还原：

1
sudo gitlab-rake gitlab:backup:restore BACKUP=1767071890_2025_12_30_17.6.0-jh

还原完成后，重启即可使用：

1
sudo gitlab-ctl reconfigure
2
sudo gitlab-ctl restart

内存占用过高#

服务器突然崩溃，参考在内存受限的环境中运行，从6GB降低至4GB，降低了 2GB

1
sudo vim /etc/gitlab/gitlab.rb
2
sudo gitlab-ctl reconfigure

1
nginx['worker_processes'] = 2
2
puma['worker_processes'] = 0
3
sidekiq['concurrency'] = 5
4
postgresql['max_worker_processes'] = 2
5
prometheus_monitoring['enable'] = false
6
gitlab_rails['env'] = {
7
  'MALLOC_CONF' => 'dirty_decay_ms:1000,muzzy_decay_ms:1000'
8
}
9
gitaly['configuration'] = {
10
  concurrency: [
11
    {
12
      'rpc' => "/gitaly.SmartHTTPService/PostReceivePack",
13
      'max_per_repo' => 3,
14
    }, {
15
      'rpc' => "/gitaly.SSHService/SSHUploadPack",
16
      'max_per_repo' => 3,
17
    },
18
  ],
19
  cgroups: {
20
    repositories: {
21
      count: 2,
22
    },
23
    mountpoint: '/sys/fs/cgroup',
24
    hierarchy_root: 'gitaly',
25
    memory_bytes: 500000,
26
    cpu_shares: 512,
27
  },
28
}
29
gitaly['env'] = {
30
  'MALLOC_CONF' => 'dirty_decay_ms:1000,muzzy_decay_ms:1000',
31
  'GITALY_COMMAND_SPAWN_MAX_PARALLEL' => '2'
32
}

同时增加的定时重启：

1
crontab -e

每天0点重启服务器：

1
# m h  dom mon dow   command
2
00 00 * * * /sbin/shutdown -r now

添加密钥#

1
ssh-keygen
2
cat ~/.ssh/id_rsa.pub

手动配置 HTTPS#

官方方法#

官方方法

编辑 /etc/gitlab/gitlab.rb：

1
external_url "https://gitlab.example.com" # 域名
2
letsencrypt['enable'] = false # 禁用 Let's Encrypt 集成
3
nginx['enable'] = true
4
nginx['redirect_http_to_https'] = true
5
nginx['ssl_certificate'] = "/etc/gitlab/ssl/gitlab.example.com.crt"
6
nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/gitlab.example.com.key"
7
nginx['listen_port'] = 18080  # 换成其他空闲端口

创建 /etc/gitlab/ssl 目录并将密钥和证书复制到那里：

1
sudo mkdir -p /etc/gitlab/ssl
2
sudo chmod 755 /etc/gitlab/ssl
3
sudo cp gitlab.example.com.key gitlab.example.com.crt /etc/gitlab/ssl/
4
sudo chmod 600 /etc/gitlab/ssl/gitlab.example.com.*

重新加载配置

1
sudo gitlab-ctl reconfigure

使用系统的 nginx 反向代理#

1
sudo vim /etc/nginx/sites-available/gitlab
2
sudo ln -s /etc/nginx/sites-available/gitlab /etc/nginx/sites-enable/gitlab
3
sudo nginx -t
4
sudo service nginx reload

1
server {
2
  listen 443 ssl;
3
  listen [::]:443 ssl;
4

5
  server_name gitlab.sample.com;
6

7
  ssl_certificate     /etc/nginx/gitlab.sample.com.pem;
8
  ssl_certificate_key /etc/nginx/gitlab.sample.com.key;
9

10
  location / {
11
    proxy_pass http://127.0.0.1:18080;
12
    proxy_set_header Host $host;
13
    proxy_set_header X-Real-IP $remote_addr;
14
  }
15
}