Cootcraig Public Blog

Gitlab Omnibus Readme

Configuration options

Configuration done in file:

/etc/gitlab/gitlab.rb

sudo gitlab-ctl reconfigure

GitLab and GitLab CI are configured by setting their relevant options in /etc/gitlab/gitlab.rb. For a complete list of available options, visit the gitlab.rb.template. New installations starting from GitLab 7.6, will have all the options of the template listed in /etc/gitlab/gitlab.rb by default.

SMTP settings

If you would rather send application email via an SMTP server instead of via Sendmail, add the following configuration information to /etc/gitlab/gitlab.rb and run gitlab-ctl reconfigure.

in /etc/gitlab/gitlab.rb
        gitlab_rails['smtp_enable'] = true
        gitlab_rails['smtp_address'] = "smtp.server"
        gitlab_rails['smtp_port'] = 456
        gitlab_rails['smtp_user_name'] = "smtp user"
        gitlab_rails['smtp_password'] = "smtp password"
        gitlab_rails['smtp_domain'] = "example.com"
        gitlab_rails['smtp_authentication'] = "login"
        gitlab_rails['smtp_enable_starttls_auto'] = true

If your SMTP server does not like the default ‘From: gitlab@localhost’ you can change the ‘From’ with this setting.

in /etc/gitlab/gitlab.rb
        gitlab_rails['gitlab_email_from'] = 'gitlab@example.com'

To change GitLab CI email configuration (e.g. use SMTP), use gitlab_ci instead of gitlab_rails.

in /etc/gitlab/gitlab.rb
        gitlab_ci['gitlab_ci_email_from'] = 'gitlab-ci@example.com'
        gitlab_ci['smtp_enable'] = true
        gitlab_ci['smtp_address'] = "smtp.server"

GitLab Community Edition Omnibus package for Debian 7

Debian 7.7 net install iso

The current “stable” distribution of Debian is version 7, codenamed wheezy. It was initially released as version 7.0 on May 4th, 2013 and its latest update, version 7.7, was released on October 18th, 2014.

Base install

Hostname: gitlab.gcsww.com


        Software Selection
        ---------------------
        remove Debian desktop environment
        leave Print server
        Add SSH server
        remove laptop


        apt-get update
        apt-get dist-upgrade
        
        apt-get install vim
        apt-get install tmux
        apt-get install git
        apt-get install sudo
        
        adduser craig sudo
        
        git config --global user.name "Your Name Here"
         Sets the default name for git to use when you commit
        
        git config --global user.email "your_email@example.com"
         Sets the default email for git to use when you commit


        ssh-copy-id -i ~/.ssh/id_rsa.pub $host

Gitlab install / Setup

gitlab download page

From Debian 7 selection


        wget https://downloads-packages.s3.amazonaws.com/debian-7.6/gitlab_7.5.3-omnibus.5.2.1.ci-1_amd64.deb
        sudo apt-get install openssh-server
        sudo apt-get install postfix # Select 'Internet Site', using sendmail instead also works, exim has problems
        
        Suggested packages:
          postfix-mysql postfix-pgsql postfix-ldap postfix-pcre sasl2-bin dovecot-common resolvconf postfix-cdb ufw postfix-doc
        The following packages will be REMOVED:
          exim4 exim4-base exim4-config exim4-daemon-light
        The following NEW packages will be installed:
          postfix
        
         Internet site:                                                                                                               
          │   Mail is sent and received directly using SMTP. 
        
        System mail name:                                                                                                                                                 │     
            │                                                                                                                                                                   │     
            │ gitlab.gcsww.com
        
        sudo dpkg -i gitlab_7.5.3-omnibus.5.2.1.ci-1_amd64.deb
        
        Setting up gitlab (7.5.3-omnibus.5.2.1.ci-1) ...
        Thank you for installing GitLab!
        Configure and start GitLab by running the following command:
        
        sudo gitlab-ctl reconfigure
        
        GitLab should be reachable at gitlab.gcsww.com
        Otherwise configure GitLab for your system by editing /etc/gitlab/gitlab.rb file
        And running reconfigure again.
        
        gitlab-ctl reconfigure

reconfigure failed the first time. Edit /etc/gitlab/gitlab.rb Also, set the email from.

diff /etc/gitlab/gitlab.rb.1 /etc/gitlab/gitlab.rb
        2c2,4
        < external_url 'gitlab.gcsww.com'
         ---
        > external_url 'http://gitlab.gcsww.com'
        > gitlab_rails['gitlab_email_from'] = 'gitlab@gcsww.com'


        2c2
        < external_url 'gitlab.gcsww.com'
        ---
        > external_url 'http://gitlab.gcsww.com'

Browse to the hostname and login


        Username: root
        Password: 5iveL!fe

Change password.

smtp access to mail.coot.net

server name: mail.coot.net
port: 26
user name: craig@coot.net
Authentication method: Normal password
Connection Security: STARTTLS

postfix configuration

Need to configure postfix

$ hostname --fqdn
        gitlab.gcsww.com

$ postconf -n
        alias_database = hash:/etc/aliases
        alias_maps = hash:/etc/aliases
        append_dot_mydomain = no
        biff = no
        config_directory = /etc/postfix
        inet_interfaces = all
        mailbox_command = procmail -a "$EXTENSION"
        mailbox_size_limit = 0
        mydestination = gitlab.gcsww.com, localhost.gcsww.com, , localhost
        myhostname = gitlab.gcsww.com
        mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
        myorigin = /etc/mailname
        readme_directory = no
        recipient_delimiter = +
        relayhost =
        smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
        smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
        smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
        smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
        smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
        smtpd_use_tls = yes

Postfix on a null client

A null client is a machine that can only send mail. It receives no mail from the network, and it does not deliver any mail locally. A null client typically uses POP, IMAP or NFS for mailbox access.

/etc/postfix/main.cf:
myhostname = hostname.example.com
myorigin = $mydomain
relayhost = $mydomain
inet_interfaces = loopback-only
mydestination =

Translation:

Line 2: Set myhostname to hostname.example.com, in case the machine name isn’t set to a fully-qualified domain name (use the command “postconf -d myhostname” to find out what the machine name is).
Line 2: The myhostname value also provides the default value for the mydomain parameter (here, “mydomain = example.com”).
Line 3: Send mail as “user@example.com” (instead of “user@hostname.example.com”), so that nothing ever has a reason to send mail to “user@hostname.example.com”.
Line 4: Forward all mail to the mail server that is responsible for the “example.com” domain. This prevents mail from getting stuck on the null client if it is turned off while some remote destination is unreachable. Specify a real hostname here if your “example.com” domain has no MX record.
Line 5: Do not accept mail from the network.
Line 6: Disable local mail delivery. All mail goes to the mail server as specified in line 4.
Linode - Configure Postfix to Send Mail Using an External SMTP Server

Edit /etc/postfix/main.cf
        /etc/postfix# diff main.cf.1 main.cf
        33,35c33,35
        < myorigin = /etc/mailname
        < mydestination = gitlab.gcsww.com, localhost.gcsww.com, , localhost
        < relayhost = 
        ---
        > myorigin = $mydomain
        > mydestination =
        > relayhost = [mail.coot.net]:26
        40c40,54
        < inet_interfaces = all
        ---
        > inet_interfaces = loopback-only
        > 
        > # see - https://www.linode.com/docs/email/postfix/postfix-smtp-debian7
        > # enable SASL authentication 
        > smtp_sasl_auth_enable = yes
        > # disallow methods that allow anonymous authentication. 
        > smtp_sasl_security_options = noanonymous
        > # where to find sasl_passwd
        > smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
        > 
        > # Enable STARTTLS encryption 
        > smtp_use_tls = yes
        > # where to find CA certificates
        > smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
        >

Configuring SMTP Usernames and Passwords

/etc/postfix/sasl_passwd
        [mail.coot.net]:26 craig@coot.net:mypassword

Create the hash db file for Postfix by running the postmap command:

postmap /etc/postfix/sasl_passwd

If all went well, you should have a new file named sasl_passwd.db in the /etc/postfix/ directory.

Securing Your Password and Hash Database Files

The /etc/postfix/sasl_passwd and the /etc/postfix/sasl_passwd.db files created in the previous steps contain your SMTP credentials in plain text.

For security reasons, you should change their permissions so that only the root user can read or write to the file. Run the following commands to change the ownership to root and update the permissions for the two files:

Change permissions of sasl_passwd and sasl_passwd.db
        chown root:root /etc/postfix/sasl_passwd /etc/postfix/sasl_passwd.db
        chmod 0600 /etc/postfix/sasl_passwd /etc/postfix/sasl_passwd.db

Test

echo "body of your email" | mail -s "This is a Subject" -a "From: you@example.com" recipient@elsewhere.com

10.10.9.175
        http://gitlab.gcsww.com/cootcraig/game_justin_craig_20141209.git
        http://10.10.9.175/cootcraig/game_justin_craig_20141209.git
        
        git remote set-url origin http://10.10.9.175/cootcraig/game_justin_craig_20141209.git

postfix research

Install Gitlab virtualbox guest on vmhost

Unpack and initial setup

dhcp ip: 10.10.9.162

Pick a static IP

DNS for Gitlab

gitlab.gcsww.local 10.10.22.6

research

bitnami Review - 10/18/2014 - Easy to install and configure - By Nacho Sanchez

Installation takes 5 minutes, and configuration is very easy since they include links to FAQs and basic stuff you should know.

Configuring the email can get tricky, so here is the basic stuff:

bitnami wiki on GitLab

Be careful with the host and port, since it sets the ones where the machine installs by default, but if you then assign a static IP you must change them manually.

Setup up work Gitlab server