-
-
Notifications
You must be signed in to change notification settings - Fork 14.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
gitlab: 11.4.4 -> 11.5.0 #50962
gitlab: 11.4.4 -> 11.5.0 #50962
Conversation
we already set VERSION in makeFlags below.
@GrahamcOfBorg test gitlab |
No attempt on aarch64-linux (full log) The following builds were skipped because they don't evaluate on aarch64-linux: tests.gitlab Partial log (click to expand)
|
No attempt on x86_64-linux (full log) The following builds were skipped because they don't evaluate on x86_64-linux: tests.gitlab Partial log (click to expand)
|
I think @GrahamcOfBorg is still borked. |
While resurrecting my test setup, I keep getting redirected to Can somebody with a more production-ready installation give this a test run? |
… as it should The nixos test is a bit misleading, as the given nginx configuration would always cause gitlab to redirect to localhost, which is clearly not what you want in a production setup. Instead we now enable services.nginx.recommendedProxySettings, curl against http://gitlab, and assure we get redirected to that same hostname, too.
Ok, this was caused by a missing As redirecting to localhost isn't desirable anyhow, I updated the nixos test to set this, and compare the redirect to not redirect to localhost. |
Failure on x86_64-darwin (full log) Attempted: gitaly, gitlab-shell, gitlab-workhorse The following builds were skipped because they don't evaluate on x86_64-darwin: gitlab Partial log (click to expand)
|
Success on aarch64-linux (full log) Attempted: gitaly, gitlab, gitlab-shell, gitlab-workhorse Partial log (click to expand)
|
@GrahamcOfBorg test gitlab |
No attempt on aarch64-linux (full log) The following builds were skipped because they don't evaluate on aarch64-linux: tests.gitlab Partial log (click to expand)
|
No attempt on x86_64-linux (full log) The following builds were skipped because they don't evaluate on x86_64-linux: tests.gitlab Partial log (click to expand)
|
Success on x86_64-linux (full log) Attempted: gitaly, gitlab, gitlab-shell, gitlab-workhorse Partial log (click to expand)
|
Motivation for this change
This updates gitlab to version 11.5.0, released on Nov 22, and all sidecar processes to the versions compatible with 11.5.0.
This includes the critical security fix in 11.4.6, which is currently missing in nixpkgs.
As upgrading gitlab and it's components was a very manual task until now, I added an
update.py
script, automating most of the process. It get's the latest stable tag for both GitLab CE and EE, gathers data about compatible sidecar packages (gitlab-shell
,gitaly
,gitlab-workhorse
) into adata.json
(which is used by the gitlab expression), then updates bundlerenvs where necessary, and bumps the sidecar packages.For some weird reason in how go packages are being built,
meta.position
forgitlab-shell
points topkgs/development/go-modules/generic/default.nix
, soupdate-source-version
isn't able to bump this automatically (but we show the version and hash to bump to on the console).Things done
sandbox
innix.conf
on non-NixOS)nix-shell -p nox --run "nox-review wip"
./result/bin/
)nix path-info -S
before and after)