【Linux】【gitlab】gitlab安装、备份、恢复、升级、内存消耗问题

前言

GitLab：GitLab 是一个用于仓库管理系统的开源项目，使用Git作为代码管理工具，并在此基础上搭建起来的web服务。
功能：Gitlab 是一个提供代码托管、提交审核和问题跟踪的代码管理平台。对于软件工程质量管理非常重要。
版本：GitLab 分为社区版（CE） 和企业版（EE）。
配置：建议CPU2核，内存2G以上。

安装

一、gitlab安装

1、安装gitlab yum库

1.安装最新版gitlab-ee（企业版）

• curl https://packages.gitlab.com/install/repositories/gitlab/gitlab-ee/script.rpm.sh | sudo bash

2.安装最新版gilab-ce（社区版）

• curl https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash

2、安装gitlab

其中ip为gitlab的访问地址。

1.企业最新版：

• EXTERNAL_URL="http://ip" yum install -y gitlab-ee

2.社区最新版：

• EXTERNAL_URL="http://ip" yum install -y gitlab-ce

3.安装指定版本：

• EXTERNAL_URL="http://ip" yum install -y gitlab-ee-12.1.9-ee.0.el7.x86_64
• EXTERNAL_URL="http://ip" yum install -y gitlab-ce-12.1.9-ce.0.el7.x86_64

4.安装完成基本指令：

查看运行状态

• gitlab-ctl status

启动

• gitlab-ctl start

停止

• gitlab-ctl stop

重启

• gitlab-ctl restart

查看版本

• cat /opt/gitlab/embedded/service/gitlab-rails/VERSION

重载配置

• gitlab-ctl reconfigure

3、访问gitlab

http://ip 浏览器打开

设置root管理员初始密码。

设置邮箱及https等请参考原文。

本文参考CSDN“一缕南风”博主，原文链接：https://blog.csdn.net/weixin_43767602/article/details/84568858

二、gitlab备份、恢复

1.gitlab备份

1.设置gitlab备份目录、权限、有限期

1 [root@localhost /]# cat /etc/gitlab/gitlab.rb | grep -v "#"
2 external_url 'http://192.168.8.127'   //安装设定的访问域名
3 gitlab_rails['manage_backup_path'] = true
4 gitlab_rails['backup_path'] = "/data/gitlab/backups"    //备份路径
5 gitlab_rails['backup_archive_permissions'] = 0644     //备份文件权限
6 gitlab_rails['backup_keep_time'] = 7776000    //备份文件有效期 30天

2.创建备份路径

1 [root@localhost /]# mkdir -vp /data/gitlab/backups
2 mkdir: 已创建目录 "/data"
3 mkdir: 已创建目录 "/data/gitlab"
4 mkdir: 已创建目录 "/data/gitlab/backups"

3.重载配置

 1 [root@localhost /]# gitlab-ctl reconfigure
 2 Starting Chef Client, version 14.13.11
 3 resolving cookbooks for run list: ["gitlab-ee"]
 4 Synchronizing Cookbooks:
 5   - gitlab-ee (0.0.1)
 6   - package (0.1.0)
 7   - gitlab (0.0.1)
 8   - consul (0.1.0)
 9   - runit (4.3.0)
10   - redis (0.1.0)
11   - repmgr (0.1.0)
12   - postgresql (0.1.0)
13   - gitaly (0.1.0)
14   - letsencrypt (0.1.0)
15   - monitoring (0.1.0)
16   - registry (0.1.0)
17   - mattermost (0.1.0)
18   - nginx (0.1.0)
19   - acme (4.0.0)
20   - crond (0.1.0)
21 Installing Cookbook Gems:
22 Compiling Cookbooks...
23 Recipe: gitlab::default
24 ……
25 ……
26 ……
27      (up to date)
28 Recipe: <Dynamically Defined Resource>
29   * service[repmgrd] action nothing (skipped due to action :nothing)
30 Recipe: repmgr::repmgrd_disable
31   * runit_service[repmgrd] action disable
32     * ruby_block[disable repmgrd] action run (skipped due to only_if)
33      (up to date)
34 Recipe: gitlab-ee::geo-secondary_disable
35   * templatesymlink[Removes database_geo.yml symlink] action delete
36     * file[/var/opt/gitlab/gitlab-rails/etc/database_geo.yml] action delete (up to date)
37     * link[/opt/gitlab/embedded/service/gitlab-rails/config/database_geo.yml] action delete (up to date)
38      (up to date)
39 Recipe: <Dynamically Defined Resource>
40   * service[unicorn] action restart
41     - restart service service[unicorn]
42   * service[sidekiq] action restart
43     - restart service service[sidekiq]
44 Recipe: gitlab::gitlab-rails
45   * execute[clear the gitlab-rails cache] action run
46     - execute /opt/gitlab/bin/gitlab-rake cache:clear
47 Running handlers:
48 Running handlers complete
49 Chef Client finished, 10/708 resources updated in 29 seconds

4.开始备份

 1 [root@localhost /]# gitlab-rake gitlab:backup:create
 2 2019-09-16 11:00:23 +0800 -- Dumping database ... 
 3 Dumping PostgreSQL database gitlabhq_production ... [DONE]
 4 2019-09-16 11:00:24 +0800 -- done
 5 2019-09-16 11:00:24 +0800 -- Dumping repositories ...
 6 2019-09-16 11:00:24 +0800 -- done
 7 2019-09-16 11:00:24 +0800 -- Dumping uploads ... 
 8 2019-09-16 11:00:24 +0800 -- done
 9 2019-09-16 11:00:24 +0800 -- Dumping builds ... 
10 2019-09-16 11:00:24 +0800 -- done
11 2019-09-16 11:00:24 +0800 -- Dumping artifacts ... 
12 2019-09-16 11:00:24 +0800 -- done
13 2019-09-16 11:00:24 +0800 -- Dumping pages ... 
14 2019-09-16 11:00:24 +0800 -- done
15 2019-09-16 11:00:24 +0800 -- Dumping lfs objects ... 
16 2019-09-16 11:00:24 +0800 -- done
17 2019-09-16 11:00:24 +0800 -- Dumping container registry images ... 
18 2019-09-16 11:00:24 +0800 -- [DISABLED]
19 Creating backup archive: 1568602824_2019_09_16_12.2.5-ee_gitlab_backup.tar ... done
20 Uploading backup archive to remote storage  ... skipped
21 Deleting tmp directories ... done
22 done
23 done
24 done
25 done
26 done
27 done
28 done
29 Deleting old backups ... done. (0 removed)
30 Warning: Your gitlab.rb and gitlab-secrets.json files contain sensitive data 
31 and are not included in this backup. You will need these files to restore a backup.
32 Please back them up manually.
33 Backup task is done.

红字部分表示 gitlab.rb 和 gitlab-secrets.json 两个文件包含敏感信息。未被备份到备份文件中。需要手动备份。

1 [root@localhost backups]# pwd
2 /data/gitlab/backups
3 [root@localhost backups]# ls -l
4 总用量 132
5 -rw-r--r-- 1 git git 133120 9月  16 11:00 1568602824_2019_09_16_12.2.5-ee_gitlab_backup.tar
6 [root@localhost backups]#

执行完成后在 /data/gitlab/backups 中生成了备份文件。

2.gitlab恢复备份

1.首先停用gitlab的数据连接部分服务

 1 [root@localhost backups]# gitlab-ctl stop unicorn
 2 ok: down: unicorn: 0s, normally up
 3 [root@localhost backups]# gitlab-ctl stop sidekiq
 4 ok: down: sidekiq: 0s, normally up
 5 [root@localhost backups]# gitlab-ctl stop nginx
 6 ok: down: nginx: 0s, normally up
 7 [root@localhost backups]# gitlab-ctl status
 8 run: alertmanager: (pid 30960) 3683s; run: log: (pid 30623) 3735s
 9 run: gitaly: (pid 30846) 3685s; run: log: (pid 30081) 3828s
10 run: gitlab-monitor: (pid 30843) 3685s; run: log: (pid 30498) 3753s
11 run: gitlab-workhorse: (pid 30820) 3686s; run: log: (pid 30349) 3784s
12 run: grafana: (pid 30980) 3682s; run: log: (pid 30750) 3698s
13 run: logrotate: (pid 37253) 178s; run: log: (pid 30384) 3777s
14 down: nginx: 4s, normally up; run: log: (pid 30368) 3781s
15 run: node-exporter: (pid 30830) 3685s; run: log: (pid 30418) 3764s
16 run: postgres-exporter: (pid 30971) 3683s; run: log: (pid 30650) 3730s
17 run: postgresql: (pid 30127) 3825s; run: log: (pid 30139) 3821s
18 run: prometheus: (pid 30943) 3684s; run: log: (pid 30588) 3741s
19 run: redis: (pid 29960) 3838s; run: log: (pid 29972) 3835s
20 run: redis-exporter: (pid 30854) 3684s; run: log: (pid 30522) 3747s
21 down: sidekiq: 13s, normally up; run: log: (pid 30324) 3788s
22 down: unicorn: 17s, normally up; run: log: (pid 30307) 3792s

2.执行恢复

远程复制的备份需要  chmod 777 1568602824_2019_09_16_12.2.5-ee.....   赋予权限

 1 [root@localhost backups]# gitlab-rake gitlab:backup:restore BACKUP=1568602824_2019_09_16_12.2.5-ee
 2 Unpacking backup ... done
 3 Before restoring the database, we will remove all existing
 4 tables to avoid future upgrade problems. Be aware that if you have
 5 custom tables in the GitLab database these tables and all data will be
 6 removed.
 7 ……………………………………
 8 Do you want to continue (yes/no)? yes
 9 This task will now rebuild the authorized_keys file.
10 You will lose any data stored in the authorized_keys file.
11 Do you want to continue (yes/no)? yes
12 
13 Deleting tmp directories ... done
14 done
15 done
16 done
17 done
18 done
19 done
20 done
21 Warning: Your gitlab.rb and gitlab-secrets.json files contain sensitive data 
22 and are not included in this backup. You will need to restore these files manually.
23 Restore task is done.

备份tar包一定要放到备份路径下。恢复是删除原有数据，恢复备份tar包中的数据。

如果是在其他服务器恢复备份，一定要记得将 gitlab.rb 和 gitlab-secrets.json 手动复制到相应路径下。

gitlab.rb路径：/etc/gitlab/gitlab.rb

gitlab-secrets.json路径：/etc/gitlab/gitlab-secrets.json

3.重载配置 

• gitlab-ctl reconfigure

4.重启gitlab，check检查

 1 [root@localhost backups]# gitlab-ctl restart
 2 ok: run: alertmanager: (pid 30960) 3785s
 3 ok: run: gitaly: (pid 30846) 3787s
 4 ok: run: gitlab-monitor: (pid 30843) 3787s
 5 ok: run: gitlab-workhorse: (pid 30820) 3788s
 6 ok: run: grafana: (pid 30980) 3784s
 7 ok: run: logrotate: (pid 37253) 280s
 8 ok: run: nginx: (pid 37535) 0s
 9 ok: run: node-exporter: (pid 30830) 3787s
10 ok: run: postgres-exporter: (pid 30971) 3785s
11 ok: run: postgresql: (pid 30127) 3927s
12 ok: run: prometheus: (pid 30943) 3786s
13 ok: run: redis: (pid 29960) 3940s
14 ok: run: redis-exporter: (pid 30854) 3786s
15 ok: run: sidekiq: (pid 37547) 1s
16 ok: run: unicorn: (pid 37553) 0s
17 [root@localhost backups]# gitlab-rake gitlab:check SANITIZE=true
18 Checking GitLab subtasks ...
19 
20 Checking GitLab Shell ...
21 
22 GitLab Shell: ... GitLab Shell version >= 9.3.0 ? ... OK (9.3.0)
23 Running /opt/gitlab/embedded/service/gitlab-shell/bin/check
24 Check GitLab API access: OK
25 Redis available via internal API: OK
26 
27 Access to /var/opt/gitlab/.ssh/authorized_keys: OK
28 gitlab-shell self-check successful
29 
30 Checking GitLab Shell ... Finished
31 
32 Checking Gitaly ...
33 
34 Gitaly: ... default ... OK
35 
36 Checking Gitaly ... Finished
37 
38 Checking Sidekiq ...
39 
40 Sidekiq: ... Running? ... yes
41 Number of Sidekiq processes ... 1
42 
43 Checking Sidekiq ... Finished
44 
45 Checking Incoming Email ...
46 
47 Incoming Email: ... Reply by email is disabled in config/gitlab.yml
48 
49 Checking Incoming Email ... Finished
50 
51 Checking LDAP ...
52 
53 LDAP: ... LDAP is disabled in config/gitlab.yml
54 
55 Checking LDAP ... Finished
56 
57 Checking GitLab App ...
58 
59 Git configured correctly? ... yes
60 Database config exists? ... yes
61 All migrations up? ... yes
62 Database contains orphaned GroupMembers? ... no
63 GitLab config exists? ... yes
64 GitLab config up to date? ... yes
65 Log directory writable? ... yes
66 Tmp directory writable? ... yes
67 Uploads directory exists? ... yes
68 Uploads directory has correct permissions? ... yes
69 Uploads directory tmp has correct permissions? ... skipped (no tmp uploads folder yet)
70 Init script exists? ... skipped (omnibus-gitlab has no init script)
71 Init script up-to-date? ... skipped (omnibus-gitlab has no init script)
72 Projects have namespace: ... can't check, you have no projects
73 Redis version >= 2.8.0? ... yes
74 Ruby version >= 2.5.3 ? ... yes (2.6.3)
75 Git version >= 2.22.0 ? ... yes (2.22.0)
76 Git user has default SSH configuration? ... yes
77 Active users: ... 1
78 Elasticsearch version 5.6 - 6.x? ... skipped (elasticsearch is disabled)
79 
80 Checking GitLab App ... Finished
81 
82 
83 Checking GitLab subtasks ... Finished

ok，至此恢复完成

三、gitlab版本升级

1.停止数据传输服务

 1 [root@localhost backups]# gitlab-ctl stop unicorn
 2 ok: down: unicorn: 0s, normally up
 3 [root@localhost backups]# gitlab-ctl stop sidekiq
 4 ok: down: sidekiq: 0s, normally up
 5 [root@localhost backups]# gitlab-ctl stop nginx
 6 ok: down: nginx: 1s, normally up
 7 [root@localhost backups]# gitlab-ctl status
 8 run: gitaly: (pid 73164) 939s; run: log: (pid 72843) 968s
 9 run: gitlab-monitor: (pid 73232) 938s; run: log: (pid 73021) 957s
10 run: gitlab-workhorse: (pid 75742) 136s; run: log: (pid 72919) 962s
11 run: logrotate: (pid 72985) 960s; run: log: (pid 72984) 960s
12 down: nginx: 5s, normally up; run: log: (pid 72960) 961s
13 run: node-exporter: (pid 73003) 959s; run: log: (pid 73002) 959s
14 run: postgres-exporter: (pid 73253) 937s; run: log: (pid 73086) 948s
15 run: postgresql: (pid 72644) 997s; run: log: (pid 72643) 997s
16 run: prometheus: (pid 73241) 938s; run: log: (pid 73064) 950s
17 run: redis: (pid 72598) 1003s; run: log: (pid 72597) 1003s
18 run: redis-exporter: (pid 73048) 951s; run: log: (pid 73047) 951s
19 down: sidekiq: 7s, normally up; run: log: (pid 72818) 974s
20 down: unicorn: 10s, normally up; run: log: (pid 72778) 976s

2.下载最新的ce/ee rpm包（清华源https://mirrors.tuna.tsinghua.edu.cn/gitlab-ee/yum/el7/ 或者https://mirrors.tuna.tsinghua.edu.cn/gitlab-ce/yum/el7/）

• wget https://mirrors.tuna.tsinghua.edu.cn/gitlab-ee/yum/el7/gitlab-ee-12.2.5-ee.0.el7.x86_64.rpm

gitlab10.0.0版本升级最新版本需要先升级到11.11.0，再升级12.2.5！

3.升级ce/ee

• rpm -Uvh gitlab-ee-12.2.5-ee.0.el7.x86_64.rpm

4.重载配置

• gitlab-ctl reconfigure

5.重启gitlab

• gitlab-ctl restart

四、gitlab解决内存消耗问题

 1 [root@storage100 backups]# cat /etc/gitlab/gitlab.rb | grep -v "#"
 2 #进程超时时间
 3 unicorn['worker_timeout'] = 60
 4 #进程数
 5 unicorn['worker_processes'] = 10
 6 #进程最小内存
 7 unicorn['worker_memory_limit_min'] = "200 * 1 << 20"
 8 #进程最大内存
 9 unicorn['worker_memory_limit_max'] = "300 * 1 << 20"
10 #并发数
11 sidekiq['concurrency'] = 16
12 #数据库缓存
13 postgresql['shared_buffers'] = "256MB"
14 #数据库并发数
15 postgresql['max_worker_processes'] = 8

参考CSDN博主"欧阳鹏",原文链接：https://blog.csdn.net/ouyang_peng/article/details/84066417

 

附gitlab备份脚本：

#!/bin/bash

#Gitlab 备份地址
LocalBackDir=/home/gitlab/data/backups

#服务机gitlab配置文件地址
#正式环境地址：
ConfigDir=/etc/gitlab/gitlab.rb

#nginx配置文件地址
#正式环境地址：NginxDir=/home/dgd/gitlab/data/nginx/conf

#邮件配置地址
#MailDir=/etc/postfix/main.cf

#Backup server 存储路径
RemoteBackDir=/home/gitlab/data/backups

#远程备份使用用户及端口
RemoteUser=root
RemotePort=22

#备份服务器IP
RemoteIP=192.168.8.200

#以当前时间戳创建备份目录
bakname=$(date -d "today" +"%Y%m%d_%H%M%S")
BakDir=$LocalBackDir/$bakname
mkdir $BakDir

#备份日志文件
LogFile=$LocalBackDir/remote_backup.log

#新建备份日志文件
touch $LogFile

#记录配置文件备份日志
echo "Gitlab configure file auto backup at local server, start at  $(date +"%Y-%m-%d %H:%M:%S")" >>  $LogFile
echo "--------------------------------------------------------------------------" >> $LogFile

#拷贝配置文件
cp $ConfigDir $BakDir >> $LogFile 2>&1
#cp -r $NginxDir $BakDir >> $LogFile 2>&1
#cp $MailDir $BakDir >> $LogFile 2>&1

#记录本地生成gitlab备份日志
echo "Gitlab auto backup at local server, start at  $(date +"%Y-%m-%d %H:%M:%S")" >>  $LogFile
echo "--------------------------------------------------------------------------" >> $LogFile

#执行gitlab本地备份
gitlab-rake gitlab:backup:create >> $LogFile 2>&1

# $?符号显示上一条命令的返回值，如果为0则代表执行成功，其他表示失败
if [ $? -eq 0 ];then
   #追加日志到日志文件
   echo "--------------------------------Success!-------------------------------" >> $LogFile
   echo "Gitlab auto backup at local server, end at $(date +"%Y-%m-%d %H:%M:%S")" >> $LogFile
else
   #追加日志到日志文件
   echo "--------------------------------Failed!----------------------------------" >> $LogFile
   echo "Gitlab auto backup at local server failed at $(date +"%Y-%m-%d %H:%M:%S")" >> $LogFile
fi


#查找本地备份目录修改时间为10分钟以内且后缀为.tar的Gitlab备份文件
Backfile_Send_To_Remote=`find $LocalBackDir -type f  -mmin -10 -name '*.tar'` >> $LogFile 2>&1

#移动生成的备份文件到配置文件备份地址
mv -bfu $Backfile_Send_To_Remote $BakDir 


#记录备份日志
echo "$(date +"%Y-%m-%d %H:%M:%S") Gitlab auto backup to remote server." >> $LogFile
echo "--------------------------------------------" >> $LogFile

#打印每次备份的档案名
echo "The files need send to remote server is: $Backfile_Send_To_Remote" >> $LogFile

# 本地传输Gitlab备份档案到远程
scp -r  $BakDir $RemoteUser@$RemoteIP:$RemoteBackDir

# 备份结果追加到备份日志
if [ $? -eq 0 ];then
  echo ""
  echo "$(date +"%Y-%m-%d %H:%M:%S") Gitlab Remote Backup Succeed!" >> $LogFile
else
  echo "$(date +"%Y-%m-%d %H:%M:%S") Gitlab Remote Backup Failed!" >> $LogFile
fi

 

来源：oschina

链接：https://my.oschina.net/u/4325833/blog/3395904