{"id":431,"date":"2025-11-19T15:40:52","date_gmt":"2025-11-19T07:40:52","guid":{"rendered":"http:\/\/43.139.99.192\/?p=431"},"modified":"2025-11-19T15:40:53","modified_gmt":"2025-11-19T07:40:53","slug":"gitlab-%e5%ae%89%e8%a3%85%e6%95%99%e7%a8%8b","status":"publish","type":"post","link":"http:\/\/43.139.99.192\/index.php\/2025\/11\/19\/gitlab-%e5%ae%89%e8%a3%85%e6%95%99%e7%a8%8b\/","title":{"rendered":"gitlab \u5b89\u88c5\u6559\u7a0b"},"content":{"rendered":"\n

\u524d\u8a00<\/strong><\/h1>\n\n\n\n

GitLab<\/strong> \u5f53\u524d\u6700\u6d41\u884c\u7684\uff0c\u4e00\u4e2a\u7528\u4e8e\u4ed3\u5e93\u7ba1\u7406\u7cfb\u7edf<\/strong>\u7684\u5f00\u6e90\u9879\u76ee<\/strong>\uff0c\u4f7f\u7528Git<\/strong>\u4f5c\u4e3a\u4ee3\u7801\u7ba1\u7406\u5de5\u5177<\/strong>\uff0c \u5e76\u5728\u6b64\u57fa\u7840\u4e0a\u642d\u5efa\u8d77\u6765\u7684Web\u670d\u52a1<\/strong>\u3002 GitLab-10\u4e07\u4f01\u4e1a\u4f7f\u7528\u7684\u4e00\u7ad9\u5f0fDevOps\u5e73\u53f0<\/strong><\/p>\n\n\n\n

GitLab\u56fd\u9645\u5b98\u7f51\uff1a<\/strong>https:\/\/about.gitlab.com\/<\/a><\/p>\n\n\n\n

\u4f4e\u6210\u672c\u7ebf\u4e0a\u53d1\u5e03<\/strong>\uff1a<\/p>\n\n\n\n

    \n
  1. \u6709\u516c\u7f51IP VPS\uff0c\u4f46\u662f\u6027\u80fd\u8d44\u6e90\u53ca\u5176\u62c9\u8de8\u3002<\/li>\n\n\n\n
  2. \u53ea\u80fd\u4e0a\u7f51\uff0c\u6ca1\u6709\u516c\u7f51IP\u3002<\/li>\n<\/ol>\n\n\n\n

    Linux\u5b89\u88c5\u6559\u7a0b<\/strong><\/h2>\n\n\n\n

    \u670d\u52a1\u5668\u914d\u7f6e\u8bf4\u660e\uff1a<\/strong><\/h3>\n\n\n\n
    \u914d\u7f6e\u9879<\/strong><\/th>\u53c2\u6570<\/strong><\/th><\/tr>
    cpu<\/td>2C<\/td><\/tr>
    \u5185\u5b58<\/td>4G<\/td><\/tr>
    \u7cfb\u7edf<\/td>Ubuntu 24.04<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    \u5b98\u7f51\u5b89\u88c5\u6559\u7a0b\u5730\u5740\uff1a<\/strong>https:\/\/gitlab.cn\/install\/<\/strong><\/a><\/p>\n\n\n\n

    \u6dfb\u52a0GitLab\u5b98\u65b9\u4ed3\u5e93\u5e76\u5b89\u88c5<\/strong><\/h3>\n\n\n\n
    # \u6dfb\u52a0GitLab\u4ed3\u5e93\ncurl https:\/\/packages.gitlab.com<\/strong>\/install\/repositories\/gitlab\/gitlab-ce<\/strong>\/script.deb<\/strong>.sh<\/strong> | sudo bash\n\u200b\n# \u641c\u7d22GitLab\u793e\u533a\u7248\u7248\u672c\u4fe1\u606f\napt-cache madison gitlab-ce<\/strong>\n\u200b\n# \u66f4\u65b0\u6307\u5b9a\u7248\u672c\u4fe1\u606f\n# apt-get upgrade gitlab-ce<\/strong>=16.8.4-ce<\/strong>.0\n# \u5b89\u88c5GitLab\u793e\u533a\u7248\nsudo apt install gitlab-ce<\/strong><\/code><\/pre>\n\n\n\n
    \u5b89\u88c5\u901f\u5ea6\u8fc7\u6162\u89e3\u51b3\u65b9\u6848<\/strong><\/h3>\n\n\n\n
      \n
    1. \u4f7f\u7528\u4ee3\u7406<\/li>\n<\/ol>\n\n\n\n
      # \u8bbe\u7f6e\u73af\u5883\u53d8\u91cf\uff08\u9002\u7528\u4e8e\u6240\u6709 apt \u547d\u4ee4\uff09\nexport http_proxy<\/strong>=\"http:\/\/<\u4ee3\u7406\u5730\u5740>:<\u7aef\u53e3>\"\nexport https_proxy<\/strong>=\"http:\/\/<\u4ee3\u7406\u5730\u5740>:<\u7aef\u53e3>\"\n\u200b\n# \u9700\u8981\u7ba1\u7406\u5458\u6743\u9650\u65f6\u4f7f\u7528\nsudo -E apt update\nsudo -E apt install gitlab-ce<\/code><\/pre>\n\n\n\n
        \n
      1. \u4f7f\u7528\u56fd\u5185\u955c\u50cf<\/li>\n<\/ol>\n\n\n\n
        # \u4fe1\u4efbGitLab\u4ed3\u5e93\ncurl -sS https:\/\/packages.gitlab.com\/gpg.key | sudo gpg --dearmor -o \/usr\/share\/keyrings\/gitlab-archive-keyring.gpg\n\u200b\n# \u6dfb\u52a0\u6e05\u534e\u955c\u50cf\u6e90\uff08\u66ff\u4ee3\u5b98\u65b9\u6e90\uff09\necho \"deb [arch=amd64 signed-by=\/usr\/share\/keyrings\/gitlab-archive-keyring.gpg] https:\/\/mirrors.tuna.tsinghua.edu.cn\/gitlab-ce\/ubuntu $(lsb_release -cs) main\" | sudo tee \/etc\/apt\/sources.list.d\/gitlab-ce.list\n\u200b\n# \u66f4\u65b0\u8f6f\u4ef6\u5305\u5217\u8868\nsudo apt update<\/code><\/pre>\n\n\n\n
        \u5347\u7ea7\u6559\u7a0b<\/strong><\/h3>\n\n\n\n
        apt update \n\u200b\n# \u641c\u7d22GitLab\u793e\u533a\u7248\u7248\u672c\u4fe1\u606f\napt-cache madison gitlab-ce\n\u200b\n# \u66f4\u65b0\u6307\u5b9a\u7248\u672c\u4fe1\u606f\n apt-get upgrade gitlab-ce<\/strong>=16.8.4-ce.0<\/code><\/pre>\n\n\n\n
        \u914d\u7f6eGitLab<\/strong><\/h3>\n\n\n\n
        \u5b89\u88c5\u5b8c\u6210\u540e\uff0c\u7f16\u8f91\u914d\u7f6e\u6587\u4ef6\/etc\/gitlab\/gitlab.rb<\/code>\u3002\u914d\u7f6e\u9879\u5305\u62ec\u4e3b\u673a\u540d\u3001\u90ae\u4ef6\u670d\u52a1\u3001\u5b58\u50a8\u8def\u5f84\u7b49\u3002\u786e\u4fdd\u914d\u7f6e\u6587\u4ef6\u4e2d\u5305\u542b\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n\n\n\n
        \u5efa\u8bae\u914d\u7f6e\uff1a<\/strong><\/p>\n\n\n\n
        external_url 'http:\/\/gitlab.example.com'\n\u200b\ngitlab_rails['smtp_enable'] = true\n\u200b\n\u200b\ngitlab_rails['smtp_address'] = \"smtp.example.com\"\n\u200b\n\u200b\ngitlab_rails['smtp_port'] = 587\n\u200b\n\u200b\ngitlab_rails['smtp_user_name'] = \"smtp user\"\n\u200b\n\u200b\ngitlab_rails['smtp_password'] = \"smtp password\"\n\u200b\n\u200b\ngitlab_rails['smtp_domain'] = \"example.com\"\n\u200b\n\u200b<\/code><\/pre>\n\n\n\n
        \u5b8c\u6574\u914d\u7f6e<\/strong><\/p>\n\n\n\n
        \u57fa\u7840\u7f51\u7edc\u914d\u7f6e<\/p>\n\n\n\n
        # \u6700\u91cd\u8981\u914d\u7f6e\uff1aGitLab \u5916\u90e8\u8bbf\u95ee\u5730\u5740\uff08\u5fc5\u987b\u4fee\u6539\uff01\uff09\nexternal_url<\/strong> 'https:\/\/gitlab.example.com'\n\u200b\n# \u76d1\u542c\u8bbe\u7f6e\uff08\u9ed8\u8ba4\u6240\u6709\u63a5\u53e3\u768480\u548c443\u7aef\u53e3\uff09\nnginx['listen_address'] = '0.0.0.0'\nnginx['listen_port'] = 80\nnginx['listen_https'] = true\n\u200b\n# HTTPS \u81ea\u52a8\u91cd\u5b9a\u5411\uff08\u63a8\u8350\u5f00\u542f\uff09\nnginx['redirect_http_to_https'] = true<\/code><\/pre>\n\n\n\n
        HTTPS\/SSL \u914d\u7f6e<\/p>\n\n\n\n
        # Let's Encrypt \u81ea\u52a8\u8bc1\u4e66\uff08\u63a8\u8350\u4f7f\u7528\uff09\nletsencrypt['enable'] = true\nletsencrypt['contact_emails'] = ['admin<\/strong>@example.com'] # \u901a\u77e5\u90ae\u7bb1\nletsencrypt['auto_renew'] = true\nletsencrypt['auto_renew_hour'] = 0\nletsencrypt['auto_renew_day_of_month'] = \"*\/7\"\n\u200b\n# \u624b\u52a8\u6307\u5b9a\u8bc1\u4e66\u8def\u5f84\n# nginx['ssl_certificate'] = \"\/etc\/gitlab\/ssl\/gitlab-example.com.crt\"\n# nginx['ssl_certificate_key'] = \"\/etc\/gitlab\/ssl\/gitlab-example.com.key\"<\/code><\/pre>\n\n\n\n
        \u6570\u636e\u5e93\u914d\u7f6e<\/p>\n\n\n\n
        # \u9ed8\u8ba4\u4f7f\u7528\u5185\u5efa PostgreSQL\uff08\u751f\u4ea7\u73af\u5883\u5efa\u8bae\u5916\u90e8\u5206\u79bb\uff09\npostgresql['enable'] = true\npostgresql['shared_buffers'] = \"256MB\" # \u5206\u914d25%\u7684\u7cfb\u7edf\u5185\u5b58\u7ed9DB\n\u200b\n# \u5916\u90e8\u6570\u636e\u5e93\u914d\u7f6e\u793a\u4f8b\n# gitlab_rails['db_adapter'] = 'postgresql'\n# gitlab_rails['db_encoding'] = 'unicode'\n# gitlab_rails['db_host'] = '127.0.0.1'\n# gitlab_rails['db_port'] = 5432\n# gitlab_rails['db_username'] = 'gitlab'\n# gitlab_rails['db_password'] = 'securepassword'<\/code><\/pre>\n\n\n\n
        \u90ae\u4ef6\u670d\u52a1\u5668\u914d\u7f6e\uff08\u5fc5\u987b\u8bbe\u7f6e\uff09<\/p>\n\n\n\n
        gitlab_rails['smtp_enable'] = true\ngitlab_rails['smtp_address'] = \"smtp.example.com\"\ngitlab_rails['smtp_port'] = 465\ngitlab_rails['smtp_user_name'] = \"gitlab@example.com\"\ngitlab_rails['smtp_password'] = \"smtp-password\"\ngitlab_rails['smtp_domain'] = \"example.com\"\ngitlab_rails['smtp_authentication'] = \"login\"\ngitlab_rails['smtp_enable_starttls_auto'] = true\ngitlab_rails['smtp_tls'] = true\n\n# \u53d1\u4ef6\u4eba\u5730\u5740\ngitlab_rails['gitlab_email_from'] = 'gitlab@example.com'\ngitlab_rails['gitlab_email_reply_to'] = 'noreply@example.com'<\/code><\/pre>\n\n\n\n
        \u6570\u636e\u5b58\u50a8\u8def\u5f84<\/p>\n\n\n\n
        # Git \u4ed3\u5e93\u5b58\u50a8\u4f4d\u7f6e\uff08\u53ef\u914d\u7f6e\u591a\u4e2a\u4f4d\u7f6e\uff09\ngit_data_dirs({\n  \"default\" => { \"path\" => \"\/var\/opt\/gitlab\/git-data\" },\n  \"secondary\" => { \"path\" => \"\/mnt\/gitlab\/git-data\" }\n})\n\n# \u4e0a\u4f20\u6587\u4ef6\u5b58\u50a8\uff08\u63a8\u8350\u4f7f\u7528\u5bf9\u8c61\u5b58\u50a8\uff09\n# gitlab_rails['uploads_storage_path'] = \"\/var\/opt\/gitlab\/gitlab-rails\/uploads\"<\/code><\/pre>\n\n\n\n
        \u5907\u4efd\u914d\u7f6e<\/p>\n\n\n\n
        gitlab_rails['backup_path'] = \"\/var\/opt\/gitlab\/backups\"\ngitlab_rails['backup_keep_time'] = 604800 # \u4fdd\u75597\u5929\u5907\u4efd\n\n# \u52a0\u5bc6\u5907\u4efd\uff08\u63a8\u8350\uff09\n# gitlab_rails['backup_encryption'] = 'AES256'\n# gitlab_rails['backup_encryption_key_path'] = '\/etc\/gitlab\/backup_encryption_key'\n\n# \u4e0a\u4f20\u5230\u8fdc\u7a0b\u5b58\u50a8 (AWS S3\u793a\u4f8b)\n# gitlab_rails['backup_upload_connection'] = {\n#   'provider' => 'AWS',\n#   'aws_access_key_id' => 'ACCESS_KEY',\n#   'aws_secret_access_key' => 'SECRET_KEY',\n#   'region' => 'us-east-1'\n# }\n# gitlab_rails['backup_upload_remote_directory'] = 'gitlab-backups'<\/code><\/pre>\n\n\n\n
        \u6027\u80fd\u4f18\u5316\u914d\u7f6e<\/p>\n\n\n\n
        # Puma (Web\u670d\u52a1\u5668)\npuma['worker_processes'] = 2              # \u5efa\u8bae\u8bbe\u7f6e\u4e3a (CPU\u6838\u5fc3\u6570 * 1.5).to_i\npuma['min_threads'] = 10\npuma['max_threads'] = 20\n\n# Sidekiq (\u540e\u53f0\u4efb\u52a1)\nsidekiq['max_concurrency'] = 15\n\n# \u5de5\u4f5c\u8fdb\u7a0b\u6700\u5927\u5185\u5b58\u9650\u5236\nunicorn['worker_memory_limit_min'] = \"300 * 1 << 20\" # 300MB\nunicorn['worker_memory_limit_max'] = \"350 * 1 << 20\" # 350MB<\/code><\/pre>\n\n\n\n
        \u5bb9\u5668\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e<\/p>\n\n\n\n
        registry['enable'] = true\nregistry_external_url 'https:\/\/registry.example.com'\nregistry['debug_addr'] = \"localhost:5001\"\n\n# \u8bc1\u4e66\u914d\u7f6e\nregistry_nginx['ssl_certificate'] = \"\/etc\/gitlab\/ssl\/registry-example.com.crt\"\nregistry_nginx['ssl_certificate_key'] = \"\/etc\/gitlab\/ssl\/registry-example.com.key\"\n\n# \u5b58\u50a8\u540e\u7aef\uff08\u63a8\u8350\u4f7f\u7528\u5bf9\u8c61\u5b58\u50a8\uff09\n# registry['storage'] = {\n#   's3' => {\n#     'bucket' => 'gitlab-registry',\n#     'region' => 'us-east-1',\n#     'accesskey' => 'AWS_ACCESS_KEY',\n#     'secretkey' => 'AWS_SECRET_KEY'\n#   }\n# }<\/code><\/pre>\n\n\n\n
        \u76d1\u63a7\u4e0e\u65e5\u5fd7<\/p>\n\n\n\n
        # \u5185\u7f6e\u76d1\u63a7\u5de5\u5177\nprometheus['enable'] = true\nnode_exporter['enable'] = true\nredis_exporter['enable'] = true\npostgres_exporter['enable'] = true\n\n# Grafana \u4eea\u8868\u677f\ngrafana['enable'] = true\ngrafana['admin_password'] = 'grafana-password'\n\n# \u65e5\u5fd7\u8bbe\u7f6e\nlogging['log_directory'] = \"\/var\/log\/gitlab\"\nlogging['logrotate_use_size'] = 100 * 1024 * 1024 # 100MB \u8f6e\u8f6c\nlogging['logrotate_count'] = 10<\/code><\/pre>\n\n\n\n
        \u5b89\u5168\u589e\u5f3a\u914d\u7f6e<\/p>\n\n\n\n
        # \u5bc6\u7801\u7b56\u7565\ngitlab_rails['password_authentication_enabled_for_web'] = true\ngitlab_rails['password_authentication_enabled_for_git'] = true\ngitlab_rails['min_password_length'] = 12\n\n# \u53cc\u91cd\u8ba4\u8bc1\ngitlab_rails['two_factor_authentication_required'] = true\n\n# \u4f1a\u8bdd\u7ba1\u7406\ngitlab_rails['session_expire_delay'] = 720 # 12\u5c0f\u65f6\u4f1a\u8bdd\u8d85\u65f6\n\n# \u7981\u7528\u6ce8\u518c\uff08\u5185\u90e8\u4f7f\u7528\u573a\u666f\uff09\n# gitlab_rails['signup_enabled'] = false<\/code><\/pre>\n\n\n\n
        \u9ad8\u7ea7\u96c6\u6210\u914d\u7f6e<\/p>\n\n\n\n
        # LDAP \u96c6\u6210\ngitlab_rails['ldap_enabled'] = true\ngitlab_rails['ldap_servers'] = {\n  'main' => {\n    'label' => 'LDAP',\n    'host' => 'ldap.example.com',\n    'port' => 636,\n    'uid' => 'sAMAccountName',\n    'encryption' => 'simple_tls',\n    'verify_certificates' => true,\n    'bind_dn' => 'CN=GitLab,OU=Service Accounts,DC=example,DC=com',\n    'password' => 'ldap-password',\n    'base' => 'DC=example,DC=com'\n  }\n}\n\n# OAuth \u63d0\u4f9b\u5546 (GitHub\u793a\u4f8b)\ngitlab_rails['omniauth_enabled'] = true\ngitlab_rails['omniauth_providers'] = [\n  {\n    name: \"github\",\n    app_id: \"github_app_id\",\n    app_secret: \"github_app_secret\",\n    args: { scope: \"user:email\" }\n  }\n]<\/code><\/pre>\n\n\n\n
        \u914d\u7f6e\u5b8c\u6210\u540e\uff0c\u8fd0\u884csudo gitlab-ctl reconfigure<\/code>\u5e94\u7528\u914d\u7f6e\u3002<\/p>\n\n\n\n
        \u914d\u7f6e\u9632\u706b\u5899\uff08\u5982\u542f\u7528\uff09<\/strong><\/h4>\n\n\n\n
        sudo ufw allow http     # \u5141\u8bb8HTTP\uff0880\u7aef\u53e3\uff09\nsudo ufw allow https    # \u5141\u8bb8HTTPS\uff08443\u7aef\u53e3\uff09\nsudo ufw allow ssh      # \u5141\u8bb8SSH\uff0822\u7aef\u53e3\uff09\nsudo ufw reload<\/code><\/pre>\n\n\n\n
        \u8bbf\u95eeGitLab<\/strong><\/h4>\n\n\n\n
        \u5b89\u88c5\u5b8c\u6210\u540e\uff1a<\/p>\n\n\n\n
          \n
        1. \u6253\u5f00\u6d4f\u89c8\u5668\u8bbf\u95ee\u00a0EXTERNAL_URL<\/code>\u00a0\u8bbe\u7f6e\u7684\u5730\u5740\u3002<\/li>\n\n\n\n
        2. \u9996\u6b21\u8bbf\u95ee\u9700\u8bbe\u7f6e\u5bc6\u7801<\/strong>\uff1a\u4e3a\u00a0root<\/code>\u00a0\u7ba1\u7406\u5458\u8d26\u6237\u8bbe\u7f6e\u5bc6\u7801\uff088\u4f4d\u4ee5\u4e0a\uff09\u3002<\/li>\n\n\n\n
        3. \u4f7f\u7528\u7528\u6237\u540d\u00a0root<\/code>\u00a0\u548c\u8bbe\u7f6e\u7684\u5bc6\u7801\u767b\u5f55\u3002<\/li>\n<\/ol>\n\n\n\n
          \u5173\u952e\u914d\u7f6e\u6587\u4ef6\uff08\u53ef\u9009\uff09<\/strong><\/h4>\n\n\n\n
          \/etc\/gitlab\/gitlab.rb<\/code><\/pre>\n\n\n\n