Gitalb gotchas - Revision history

Chubbard at 01:26, 4 February 2022

2022-02-04T01:26:39Z

← Older revision		Revision as of 18:26, 3 February 2022
Line 27:		Line 27:
	[https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/4997\| Gitlab BUG describing this behavior]		[https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/4997\| Gitlab BUG describing this behavior]
	<pre>		<pre>
	external_url '~~http~~://gitlab01.iwillfearnoevil.com'		external_url 'https://gitlab01.iwillfearnoevil.com'

	letsencrypt['enable'] = false		letsencrypt['enable'] = false
	registry_external_url 'https://~~192~~.~~168~~.~~15.190~~:5050'		registry_external_url 'https://registry.iwillfearnoevil.com:5050'

	nginx['enable'] = true		nginx['enable'] = true
Line 41:		Line 40:
	registry_nginx['ssl_certificate'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'		registry_nginx['ssl_certificate'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'
	registry_nginx['ssl_certificate_key'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'		registry_nginx['ssl_certificate_key'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'

	</pre>		</pre>

Chubbard at 01:07, 4 February 2022

2022-02-04T01:07:32Z

← Older revision		Revision as of 18:07, 3 February 2022
Line 59:		Line 59:
	</pre>		</pre>

			Error message when doing docker login due to no X11
			[https://anto.online/guides/cannot-autolaunch-d-bus-without-x11-display/\| Fix for X11 error]
			<pre>
			The simplest solution to fix the “Cannot autolaunch D-Bus without X11 $DISPLAY” error is to install pass—the standard UNIX password manager. You do not need to remove docker-compose! However, the pass depends on gpg, so you will need to install two applications.

			You can install pass and gpg using the following command:

			Ubuntu / Debian

			sudo apt-get install pass gnupg2

			# create a gpg2 key
			gpg2 --gen-key

			# create the password store using the gpg user id
			pass init $gpg_id
			</pre>



	[[Category:Gitlab]]		[[Category:Gitlab]]

Chubbard at 00:46, 4 February 2022

2022-02-04T00:46:14Z

@@ Line 42: / Line 42: @@
 registry_nginx['ssl_certificate_key'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'
 </pre>
 [[Category:Gitlab]]

Chubbard: Created page with " [https://sleeplessbeastie.eu/2020/06/29/how-to-enable-gitlab-container-registry/| Source Notes]

 Enable GitLab Container Registry on an instance running HAProxy.  Edit..."

2022-02-03T23:50:55Z

Created page with " [https://sleeplessbeastie.eu/2020/06/29/how-to-enable-gitlab-container-registry/| Source Notes] <pre> Enable GitLab Container Registry on an instance running HAProxy. Edit..."

New page

[https://sleeplessbeastie.eu/2020/06/29/how-to-enable-gitlab-container-registry/| Source Notes]

<pre>
Enable GitLab Container Registry on an instance running HAProxy.

Edit /etc/gitlab/gitlab.rb GitLab configuration file to define registry address.
registry_external_url 'https://registry.example.org/'

Beware, parameters like nginx['listen_https'] = false and nginx['listen_port'] = 80 have no effect here.

Ensure that /etc/gitlab/ssl directory exists.
$ sudo mkdir /etc/gitlab/ssl

Generate a self-signed SSL certificate.
$ sudo openssl req -subj "/commonName=registry.example.org/" -x509 -nodes -days 730 -newkey rsa:2048 -keyout /etc/gitlab/ssl/registry.example.org.key -out /etc/gitlab/ssl/registry.example.org.crt

Reconfigure GitLab instance.
$ sudo gitlab-ctl reconfigure
</pre>
Working config for iwillfearnoevil.com

Caution must be used, as using a WC cert, does to allow for registry.gitlab, and TBH should be by IP. However the ELB/HAProxy host can have the registry and forward to 5050 for outside world connections

External URL is what the local machine is offering, a different name can be used on a LB and forward TO that external URL. Same deal with registry, however it is an odd duck. Recommend using IP address from what is seen over the internet.

[https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/4997| Gitlab BUG describing this behavior]
<pre>
external_url 'http://gitlab01.iwillfearnoevil.com'

letsencrypt['enable'] = false
registry_external_url 'https://192.168.15.190:5050'

nginx['enable'] = true
nginx['redirect_http_to_https'] = true
nginx['ssl_certificate'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'
nginx['ssl_certificate_key'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'

registry_nginx['enable'] = true
registry_nginx['listen_port'] = 5050
registry_nginx['ssl_certificate'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'
registry_nginx['ssl_certificate_key'] = '/etc/gitlab/ssl/iwillfearnoevil.com.pem'
</pre>

[[Category:Gitlab]]