GitLab Docker Sample Deployment

This is just a sample deployment of GitLab with 4 runner nodes for CI/CD using docker compose. To start copy/rename sample.env into .env and change the values to reflect your deployment. Once that is done simply issue docker-compose up -d

Once everything is up and running you can find the root password by executing:

sudo docker exec -it gitlab_gitlab-web_1 grep 'Password:' /etc/gitlab/initial_root_password

If you wish to enable CI/CD you can regiter the runners by providing the token and the URL to your GitLab deployment like below examples:

sudo docker exec -it gitlab_gitlab-runner-node1_1 \
  gitlab-runner register \
    --non-interactive \
    --registration-token [TOKEN] \
    --locked=false \
    --description docker-stable \
    --url http://my-domain.com/ \
    --executor docker \
    --docker-image alpine:latest \
    --docker-volumes "/var/run/docker.sock:/var/run/docker.sock" \
    --docker-network-mode gitlab-network

sudo docker exec -it gitlab_gitlab-runner-node2_1 \
  gitlab-runner register \
    --non-interactive \
    --registration-token [TOKEN] \
    --locked=false \
    --description shell-stable \
    --url http://my-domain.com/ \
    --executor shell

[experimental] To create SSL certificate files execute below from encore directory:

HOSTNAME=my-domain.com \
&& openssl req -x509 -out persistent/certs/${HOSTNAME}.crt \
    -keyout persistent/certs/${HOSTNAME}.key \
    -newkey rsa:2048 -nodes -sha256 -days 365 \
    -subj "/CN=${HOSTNAME}" \
    -extensions EXT \
    -config <(printf "[dn]\nCN=${HOSTNAME}\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:${HOSTNAME}\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")

To use VS Code clone over HTTPS using the self-signed certificate you have two options:

1. Add the certicate to git, this will allow you to clone any future repos:

   git config --global http.sslCAinfo $(pwd)/persistent/certs/[CRT_FILE_GENERATED_ABOVE].crt

2. Change sslVerify setting to overwrite security:

   git config --global http.sslVerify false

   Make sure to revert back to avoid leaving open doors.

   git config --global http.sslVerify true