安装Gitlab(via dockerimage)，实现Auto

准备机器,信息如下：

root@server:~# hostnamectl
   Static hostname: server.local
         Icon name: computer-vm
           Chassis: vm
        Machine ID: 7b0c392aff5f742bb78a87e65b929466
           Boot ID: bef54cfd95454cbc92e14b5091745b67
    Virtualization: vmware
  Operating System: Ubuntu 16.04.5 LTS
            Kernel: Linux 4.4.0-134-generic
      Architecture: x86-64

更改ssh server端口，避免与gitlab ssh端口冲突

root@server:~# vim /etc/ssh/sshd_config
...(省略)
# What ports, IPs and protocols we listen for
Port 2222
...(省略)

重启sshd服务变更端口生效

root@server:~# systemctl restart sshd.service

设置从客户端ssh免密到server

#确保通过名称server.local访问到服务器
gitadmin@DESKTOP-PCPO8BK:~$ sudo vim /etc/hosts
192.168.193.200 server.local

#更改ssh客户端连接ssh服务器的默认关口
gitadmin@DESKTOP-PCPO8BK:~$ vim .ssh/config
Host server.local
    Port 2222

#生成密钥，-C 备注关联用户
gitadmin@DESKTOP-PCPO8BK:~$ ssh-keygen -C "simon.zhu@xxxx.com"

#copy公钥到服务器
gitadmin@DESKTOP-PCPO8BK:~$ ssh-copy-id root@server.local

#测试免密连接
gitadmin@DESKTOP-PCPO8BK:~$ ssh root@server.local
Welcome to Ubuntu 16.04.5 LTS (GNU/Linux 4.4.0-134-generic x86_64)

 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage

38 packages can be updated.
28 updates are security updates.

New release '18.04.1 LTS' available.
Run 'do-release-upgrade' to upgrade to it.


Last login: Sat Oct 27 13:00:15 2018 from 192.168.193.1
root@server:~#

在服务器安装Docker
在服务器安装Docker Compose
给服务配置大内存，尽量使用内存，提高性能

以下安装MTA（smtp服务器），为Gitlab准备邮件通知功能

apt install -y postfix
#将docker的ip（一般以172开头）设置为可信网络，以便smtp服务器接收gitlab发出的投递请求
root@server:~# vim /etc/postfix/main.cf
mynetworks = 172.0.0.0/8 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
root@server:~# systemctl restart postfix.service

运行Gitlab Runner

root@runner1:~/runner# vim docker-compose.yml
version: '3.7'
services:
  runner:
    image: gitlab/gitlab-runner:alpine-v11.4.2
    restart: always
    extra_hosts:
      - "server.local:192.168.193.200"
    environment:
      - RUNNER_NAME=Docker Executor (Docker in Docker)
    volumes:
      - /srv/gitlab-runner/config:/etc/gitlab-runner
      - /var/run/docker.sock:/var/run/docker.sock
root@runner1:~/runner# docker-compose up -d

启动Gitlab

root@server:~# mkdir -p ci
root@server:~# cd ci/
root@server:~/ci# vim gitlab.yml
version: '3.7'
services:
  web:
    image: 'gitlab/gitlab-ce:11.4.0-ce.0'
    restart: always
    hostname: 'server.local'
    extra_hosts:
      #邮件通知服务器地址
      - "smtp.server:192.168.193.200"
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'http://192.168.193.200'
        gitlab_rails['smtp_enable'] = true;
        gitlab_rails['smtp_address'] = 'smtp.server';
        gitlab_rails['smtp_port'] = 25;
        gitlab_rails['smtp_domain'] = 'server.local';
        gitlab_rails['smtp_tls'] = false;
        gitlab_rails['smtp_openssl_verify_mode'] = 'none'
        gitlab_rails['smtp_enable_starttls_auto'] = false
        gitlab_rails['smtp_ssl'] = false
        gitlab_rails['smtp_force_ssl'] = false
        gitlab_rails['ldap_enabled'] = true
        gitlab_rails['ldap_servers'] = YAML.load <<-EOS
        main:
          label: 'ldap.mycom.com'
          host: 'ldap'
          port: 389
          uid: 'uid'
          encryption: 'plain'
          bind_dn: 'cn=admin,dc=mycom,dc=com'
          password: '1'
          active_directory: false
          allow_username_or_email_login: true
          lowercase_usernames: true
          base: 'cn=admin,dc=mycom,dc=com'
          user_filter: ''
        EOS
    ports:
      - '80:80'
      - '443:443'
      - '22:22'
    volumes:
      - './gitlab/config:/etc/gitlab'
      - './gitlab/logs:/var/log/gitlab'
      - './gitlab/data:/var/opt/gitlab'

#启动Gitlab
root@server:~/ci# docker-compose -f gitlab.yml up -d

增加ldap方式的Gitlab认证授权，启动ldap服务

root@server:~/ci# vim ldap.yml
version: '3.7'

services:
  ldap:
    image: "osixia/openldap:1.2.2"
    restart: always
    environment:
      LDAP_ORGANISATION: mycom
      LDAP_DOMAIN: mycom.com
      LDAP_BASE_DN: mycom.com
      LDAP_ADMIN_PASSWORD: "admin"
      LDAP_OPENLDAP_UID: 0
      LDAP_OPENLDAP_GID: 0
      LDAP_TLS: "false"
      LDAP_CONFIG_PASSWORD: "admin"
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ./ldap/database:/var/lib/ldap
      - ./ldap/conf:/etc/ldap/slapd.d
    expose:
      - "389"
#    network_mode: "host"
#    ports:
#      - 389:389

  phpldapadmin:
    image: "osixia/phpldapadmin:0.7.2"
    restart: always
    environment:
      PHPLDAPADMIN_HTTPS: "false"
      PHPLDAPADMIN_LDAP_HOSTS: "ldap"
    volumes:
      - /etc/localtime:/etc/localtime:ro
#    network_mode: "host"
    ports:
#      - 6443:443
      - 6080:80

#启动ldap服务
root@server:~/ci# docker-compose -f ldap.yml up -d

在ldap服务添加用户

Login DN:cn=admin,dc=mycom,dc=com;Passwords:admin
image.png

用在ldap中添加的用户登陆GItlab

用邮箱和密码登陆
image.png

启动Runner
准备另一台机器，软件环境与上面Server相同(即安装好Docker和Docker Compose)

root@runner1:~# hostnamectl
   Static hostname: runner1.local
         Icon name: computer-vm
           Chassis: vm
        Machine ID: 7b0c392aff5f742bb78a87e65b929466
           Boot ID: 11957514ccc14a59ae62789bb4a311fb
    Virtualization: vmware
  Operating System: Ubuntu 16.04.5 LTS
            Kernel: Linux 4.4.0-134-generic
      Architecture: x86-64
root@runner1:~# mkdir -p runner/
root@runner1:~# cd runner/
root@runner1:~/runner# vim docker-compose.yml
version: '3.7'
services:
  runner:
    image: gitlab/gitlab-runner:alpine-v11.4.2
    restart: always
    extra_hosts:
      - "server.local:192.168.193.200"
#      - "gitlab.mycom.com:192.168.193.200"
    environment:
      - RUNNER_NAME=Docker Executor (Docker in Docker)
    volumes:
      - /srv/gitlab-runner/config:/etc/gitlab-runner
      - /var/run/docker.sock:/var/run/docker.sock
root@runner1:~/runner# docker-compose up -d

注册Runner
（token需要GItlab的root用户通过Standard登陆查看）

image.png

root@runner1:~/runner# docker exec -it runner_runner_1 bash
bash-4.4# gitlab-runner register -n \
>   --url http://server.local/ \
>   --registration-token Qmx8nyxdCypHLpzyH5eH \
>   --executor docker \
>   --description "My Docker Runner(dind executor)" \
>   --docker-image "docker:stable" \
>   --docker-privileged
Runtime platform                                    arch=amd64 os=linux pid=17 revision=cf91d5e1 version=11.4.2
Running in system-mode.

Registering runner... succeeded                     runner=Qmx8nyxd
Runner registered successfully. Feel free to start it, but if it's running already the config should be automatically reloaded!

通过Gitlab查看注册的Runner

image.png

登陆Gitlab，注册ssh公钥，创建项目，并克隆到本地，创建.gitlab-ci.yml

gitadmin@DESKTOP-PCPO8BK:~/pj1$ vim .gitlab-ci.yml

push到Gitlab，Gitlab自动运行pipeline（编译，测试，打包，发布）

image.png

后续打算继续如下实验
1，通过redmine提出功能需求
2，基于主分支，创建开发分支，完成开发，静态代码分析，测试
3，创建merge request到master
4，确认merge request通过，自动关闭redmine的issue

待完成。