This project creates full-stack platform-specific downloadable packages for GitLab.
Go to file
Dustin Collins 1aa9292bac Add CI job to validate Let's Encrypt behavior against test ACME endpoint 2021-05-18 15:32:29 +00:00
.gitlab Use a custom tag format for changelogs 2021-03-26 15:12:40 +01:00
ci_build_specs Switch to using gitlab-styles for rubocop 2019-07-31 14:18:19 -07:00
config Use backup_keep_time to prune configuration backups 2021-05-13 05:18:05 +00:00
doc Make S3 buckets configurable via environment variables 2021-05-14 18:59:45 +00:00
docker Added environment support for ECS/Fargate 2021-05-07 15:18:06 -04:00
files Add CI job to validate Let's Encrypt behavior against test ACME endpoint 2021-05-18 15:32:29 +00:00
gitlab-ci-config Add CI job to validate Let's Encrypt behavior against test ACME endpoint 2021-05-18 15:32:29 +00:00
letsencrypt-test Add CI job to validate Let's Encrypt behavior against test ACME endpoint 2021-05-18 15:32:29 +00:00
lib Add CI job to validate Let's Encrypt behavior against test ACME endpoint 2021-05-18 15:32:29 +00:00
resources/rpm Fix package signing for newer rpm versions 2019-07-05 09:54:43 +05:30
scripts Tweak Danger to better detect changelog trailers 2021-04-23 15:39:39 +02:00
spec Merge branch 'expired-ssh-key-notification-cron' into 'master' 2021-05-14 19:51:57 +00:00
support Override license detection for go-license-detector 2021-05-10 08:32:35 +02:00
.custom_sources.yml Nginx build with security headers module 2021-04-28 10:25:26 -07:00
.cveignore Add patch for libxml2 CVE-2019-20388, CVE-2020-7595 2021-02-01 08:56:52 +00:00
.gitattributes Update merge strategy for CHANGELOG.md 2018-03-26 11:27:04 +01:00
.gitignore Ignore JS specific cache directories 2020-10-20 14:01:28 -05:00
.gitlab-ci.yml Add CI job to validate Let's Encrypt behavior against test ACME endpoint 2021-05-18 15:32:29 +00:00
.markdownlint.json Harmonize docs linting rules 2020-09-28 09:36:00 +10:00
.rspec Introduce a Build::Image module and reorganize its subclasses and Rake tasks 2017-12-07 15:19:50 +01:00
.rubocop.yml Update gitlab-styles from 4.3.0 to 6.1.0 2021-04-26 22:26:00 +00:00
.rubocop_todo.yml Update gitlab-styles from 4.3.0 to 6.1.0 2021-04-26 22:26:00 +00:00
.ruby-version Bump development Ruby version to v2.7.2 and bundler v2.1.4 2020-10-30 21:49:03 -07:00
.vale.ini Add Vale checks to project 2020-03-18 06:38:21 +00:00
Berksfile Initial commit 2013-11-21 13:06:42 +02:00
CHANGELOG.md Update changelog for 13.11.4 2021-05-14 13:11:00 +00:00
CONTRIBUTING.md Replace references of gitlab-org/gitlab-ce to gitlab-org/gitlab-foss 2019-09-13 19:56:12 +05:30
Dangerfile Reformat output to be one entry 2019-09-06 17:58:39 +00:00
GITALY_SERVER_VERSION Reset Gitaly server version back to master 2019-05-03 04:47:51 -07:00
GITLAB_ELASTICSEARCH_INDEXER_VERSION Update GITLAB_ELASTICSEARCH_INDEXER_VERSION to use main branch 2021-02-11 21:40:50 +00:00
GITLAB_KAS_VERSION Switch GITLAB_KAS_VERSION to master 2021-01-11 23:09:41 +00:00
GITLAB_PAGES_VERSION Move all VERSION files back to master 2019-05-03 05:08:42 -07:00
GITLAB_SHELL_VERSION Use the 'main' branch for gitlab-shell nightlies 2020-11-26 13:36:42 +00:00
GITLAB_WORKHORSE_VERSION Move all VERSION files back to master 2019-05-03 05:08:42 -07:00
Gemfile Update gitlab-styles from 4.3.0 to 6.1.0 2021-04-26 22:26:00 +00:00
Gemfile.lock Update nokogiri from 1.8.2 to 1.11.1 2021-04-30 09:12:03 +00:00
LICENSE Change docs license to CC BY-SA 4.0 2018-05-04 13:19:15 +02:00
README.md Modernize remove commands for uninstall 2020-01-28 13:28:21 +00:00
Rakefile Speed up rubocop CI job 2018-03-11 10:11:23 +09:00
VERSION Reset VERSION to say master 2019-04-21 11:30:31 +05:30
deps.yml Drop unused awesomeprint gem 2021-02-19 10:12:02 -08:00
omnibus.rb Disable fetcher progress bar globally 2021-04-20 11:55:50 -05:00
omnibus.rb.example Initial commit 2013-11-21 13:06:42 +02:00

README.md

Omnibus GitLab

Description

This project creates full-stack platform-specific downloadable packages for GitLab. For other installation options please see the GitLab installation page.

Canonical source

The source of omnibus-gitlab is hosted on GitLab.com and there are mirrors to make contributing as easy as possible.

Documentation

The documentation overview is in the readme in the doc directory.

Omnibus fork

Omnibus GitLab is using a fork of omnibus project. For additional information see the comments in the Gemfile.

We left the links below in the readme to preserve old links, but please use the readme in the doc directory to browse the complete documentation.

Contributing

Please see the contribution guidelines

Installation

Please follow the steps on the downloads page.

After installation

Your GitLab instance should be reachable over HTTP at the IP or hostname of your server. You can login as an admin user with username root and password 5iveL!fe.

See doc/maintenance/README.md for useful commands to control/debug your GitLab instance.

Configuration options

See doc/settings/configuration.md.

Configuring the external URL for GitLab

See doc/settings/configuration.md.

Storing Git data in an alternative directory

See doc/settings/configuration.md.

Changing the name of the Git user / group

See doc/settings/configuration.md.

Setting up LDAP sign-in

See doc/settings/ldap.md.

Enable HTTPS

See doc/settings/nginx.md.

Redirect HTTP requests to HTTPS

See doc/settings/nginx.md.

Change the default port and the ssl certificate locations

See doc/settings/nginx.md.

Use non-packaged web-server

For using an existing Nginx, Passenger, or Apache webserver see doc/settings/nginx.md.

Using a non-packaged PostgreSQL database management server

To connect to an external PostgreSQL DBMS see doc/settings/database.md

Using a non-packaged Redis instance

See doc/settings/redis.md.

Adding ENV Vars to the Gitlab Runtime Environment

See doc/settings/environment-variables.md.

Changing gitlab.yml settings

See doc/settings/gitlab.yml.md.

Specify numeric user and group identifiers

See doc/settings/configuration.md.

Sending application email via SMTP

See doc/settings/smtp.md.

Omniauth (Google, Twitter, GitHub login)

Omniauth configuration is documented in docs.gitlab.com.

Adjusting Unicorn settings

See doc/settings/unicorn.md.

Setting the NGINX listen address or addresses

See doc/settings/nginx.md.

Inserting custom NGINX settings into the GitLab server block

See doc/settings/nginx.md.

Inserting custom settings into the NGINX config

See doc/settings/nginx.md.

Only start omnibus-gitlab services after a given filesystem is mounted

See doc/settings/configuration.md.

Updating

Instructions for updating your Omnibus installation and upgrading from a manual installation are in the update doc.

Uninstalling omnibus-gitlab

To remove all users and groups created by omnibus-gitlab, before removing the gitlab package (with dpkg or yum) run sudo gitlab-ctl remove-accounts. Note All gitlab processes need to be stopped before running the command.

To remove all omnibus-gitlab data use sudo gitlab-ctl cleanse.

To uninstall omnibus-gitlab, preserving your data (repositories, database, configuration), run the following commands.

# Stop gitlab and remove its supervision process
sudo systemctl stop    gitlab-runsvdir
sudo systemctl disable gitlab-runsvdir
sudo rm /usr/lib/systemd/system/gitlab-runsvdir.service
sudo systemctl daemon-reload
sudo gitlab-ctl uninstall

# (Replace with gitlab-ce if you have GitLab FOSS installed)

# Debian/Ubuntu
sudo apt remove gitlab-ee

# Redhat/Centos
sudo yum remove gitlab-ee

Common installation problems

This section has been moved to the separate document doc/common_installation_problems/README.md.

Section below remains for historical reasons(mainly to not break existing links). Each section contains the link to the new location.

Apt error 'The requested URL returned error: 403'

See doc/common_installation_problems/README.md.

GitLab is unreachable in my browser

See doc/common_installation_problems/README.md.

Emails are not being delivered

See doc/common_installation_problems/README.md.

Reconfigure freezes at ruby_block[supervise_redis_sleep] action run

See doc/common_installation_problems/README.md.

TCP ports for GitLab services are already taken

See doc/common_installation_problems/README.md.

Git SSH access stops working on SELinux-enabled systems

See doc/common_installation_problems/README.md.

Postgres error 'FATAL: could not create shared memory segment: Cannot allocate memory'

See doc/common_installation_problems/README.md.

Reconfigure complains about the GLIBC version

See doc/common_installation_problems/README.md.

Reconfigure fails to create the git user

See doc/common_installation_problems/README.md.

Failed to modify kernel parameters with sysctl

See doc/common_installation_problems/README.md.

I am unable to install omnibus-gitlab without root access

See doc/common_installation_problems/README.md.

gitlab-rake assets:precompile fails with 'Permission denied'

See doc/common_installation_problems/README.md.

'Short read or OOM loading DB' error

See doc/common_installation_problems/README.md.

Backups

See doc/settings/backups.md.

Backup and restore omnibus-gitlab configuration

See doc/settings/backups.md.

Creating an application backup

See doc/settings/backups.md.

Restoring an application backup

See backup restore documentation.

Backup and restore using non-packaged database

If you are using non-packaged database see documentation on using non-packaged database.

Upload backups to remote (cloud) storage

For details check backup restore document of GitLab CE.

Invoking Rake tasks

See doc/maintenance/README.md.

Directory structure

Omnibus-gitlab uses four different directories.

  • /opt/gitlab holds application code for GitLab and its dependencies.
  • /var/opt/gitlab holds application data and configuration files that gitlab-ctl reconfigure writes to.
  • /etc/gitlab holds configuration files for omnibus-gitlab. These are the only files that you should ever have to edit manually.
  • /var/log/gitlab contains all log data generated by components of omnibus-gitlab.

Omnibus-gitlab and SELinux

Although omnibus-gitlab runs on systems that have SELinux enabled, it does not use SELinux confinement features:

  • omnibus-gitlab creates unconfined system users;
  • omnibus-gitlab services run in an unconfined context.

The correct operation of Git access via SSH depends on the labeling of /var/opt/gitlab/.ssh. If needed you can restore this labeling by running sudo gitlab-ctl reconfigure.

Depending on your platform, gitlab-ctl reconfigure will install SELinux modules required to make GitLab work. These modules are listed in files/gitlab-selinux/README.md.

NSA, if you're reading this, we'd really appreciate it if you could contribute back a SELinux profile for omnibus-gitlab :) Of course, if anyone else is reading this, you're welcome to contribute the SELinux profile too.

Logs

This section has been moved to separate document doc/settings/logs.md.

Tail logs in a console on the server

See doc/settings/logs.md.

Runit logs

See doc/settings/logs.md.

Logrotate

See doc/settings/logs.md.

UDP log shipping (GitLab Enterprise Edition only)

See doc/settings/logs.md

Create a user and database for GitLab

See doc/settings/database.md.

Configure omnibus-gitlab to connect to it

See doc/settings/database.md.

Seed the database (fresh installs only)

See doc/settings/database.md.

Building your own package

See the separate build documentation.

Running a custom GitLab version

It is not recommended to make changes to any of the files in /opt/gitlab after installing omnibus-gitlab: they will either conflict with or be overwritten by future updates. If you want to run a custom version of GitLab you can build your own package or use another installation method.

Acknowledgments

This omnibus installer project is based on the awesome work done by Chef in omnibus-chef-server.