gitlab一键安装+配置(备份+LADP认证)

gitlab一键安装+配置(备份+LADP认证)

 #gitlab一键安装
 #centos6 mini, GitLab社区版
 #参考官方最新文档 https://www.gitlab.com.cn/installation

 #关闭防火墙(略)
 ntpdate ntp6.aliyun.com ##同步时间
 #更换源
 yum -y install wget vim
 mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
 wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-6.repo
 yum -y install http://mirrors.ustc.edu.cn/fedora/epel/6/x86_64/epel-release-6-8.noarch.rpm
 yum makecache #生成缓存

 #安装配置依赖
 yum install curl openssh-server openssh-clients postfix cronie -y
 service postfix start
 chkconfig postfix on
 lokkit -s http -s ssh

 # 添加GitLab仓库
 curl -sS http://packages.gitlab.cc/install/gitlab-ce/script.rpm.sh | bash
 yum install gitlab-ce #(自动安装最新版)
 #yum install gitlab-ce-8.8.-ce..el6 #(安装指定版本)
 #下载rpm包安装
 #https://mirrors.tuna.tsinghua.edu.cn/gitlab-ce/yum/el6/
 #curl -LJO https://mirrors.tuna.tsinghua.edu.cn/gitlab-ce/yum/el6/gitlab-ce-XXX.rpm
 #rpm -i gitlab-ce-*.rpm

 vim /etc/gitlab/gitlab.rb #修改配置
 external_url 'http://192.168.18.9' #修改访问web
 gitlab_rails['backup_path'] = '/home/backup' #修改备份文件的目录
 gitlab_rails['backup_keep_time'] =     #备份保存7天(604800是7天的秒数)

 gitlab-ctl reconfigure #载入配置
 #v8初始密码：
 Username: root
 Password: 5iveL!fe
 #w1w1e1e1

 gitlab-ctl status #查看服务状态
 gitlab-rake gitlab:check SANITIZE=true --trace #检查gitlab
 gitlab-ctl reconfigure #启动服务
 gitlab-ctl stop     #停止所有 gitlab 组件
 gitlab-ctl start
 gitlab-ctl restart
 vim /etc/gitlab/gitlab.rb #修改默认的配置
 cat /opt/gitlab/embedded/service/gitlab-rails/VERSION #查看版本
 gitlab-ctl tail #查看日志

 ##备份
 gitlab-rake gitlab:backup:create #创建备份
 #自动备份(定时任务凌晨2点执行)
 crontab -e
   * * * /opt/gitlab/bin/gitlab-rake gitlab:backup:create
 #恢复
 gitlab-ctl stop
 #BACKUP=xxxxxx ，为备份文件前面的数字部分
 cd /var/opt/gitlab/backups # 默认备份存放目录
 gitlab-rake gitlab:backup:restore BACKUP=xxxxxx
 gitlab-rake gitlab:backup:restore #backups目录只有一个备份时使用  

 ###########################################################
 ##汉化
 #下载对于版本的汉化包
 https://coding.net/u/larryli/p/gitlab/git/tree/v8.1.2.zh1/
 #停止服务
 gitlab-ctl stop
 cp -arp /opt/gitlab/embedded/service/gitlab-rails /opt/gitlab/embedded/service/gitlab-rails-bak/
 #下载汉化版替换
 cd /root/gitlab
 unzip *.zh1.zip
  \cp -arp /root/gitlab/gitlab-v8.1.2.zh1/.  /opt/gitlab/embedded/service/gitlab-rails/
 gitlab-ctl reconfigure #重新加载配置启动GitLab

 ##GitLab修改root用户密码
 # root用户下执行
     gitlab-rails console production
     user = User.where(id: ).first
     user.password=
     user.password_confirmation=
     user.save!
     quit
 ########完成

 ###########################################################
 #AD域配置文件,AD认证用户要对应其目录
 #也可以使用OpenLADP
 cp /etc/gitlab/gitlab.rb{,.bak}
 #cp /etc/gitlab/gitlab.rb.bak /etc/gitlab/gitlab.rb
 vim /etc/gitlab/gitlab.rb
 #gitlab
 external_url 'http://192.168.18.10'
 #  LDAP,AD
  gitlab_rails['ldap_enabled'] = true
  gitlab_rails['ldap_servers'] = YAML.load <<-EOS
    main: # 'main' is the GitLab 'provider ID' of this LDAP server
      label: 'xlh'
      host: '172.16.16.16' #AD的IP#
      port:
      uid: 'sAMAccountName'
      method: 'plain' # "tls" or "ssl" or "plain"
      bind_dn: 'CN=gitlab,OU=Dev,OU=users,DC=test,DC=dev'
      password: ''
      active_directory: true
      allow_username_or_email_login: false
      block_auto_created_users: false
      allow_username_or_email_login: false
      block_auto_created_users: false
      base: 'OU=Dev,OU=users,DC=test,DC=dev'
      user_filter: ''
      group_base: ''
      admin_group: ''
      sync_ssh_keys: false
 EOS
 ###########
 gitlab-ctl reconfigure #重新载入配置