Skip to content

Latest commit

 

History

History
144 lines (99 loc) · 4.07 KB

install.rst

File metadata and controls

144 lines (99 loc) · 4.07 KB
Raw

Installation

Requirements

Drone is tested on the following versions of Ubuntu:

  • Ubuntu Precise 12.04 (64-bit)
  • Ubuntu Raring 13.04 (64 bit)

Drone requires the latest version of Docker (0.8)

Installation

Drone is distributed as a debian package for easy installation:

$ wget http://downloads.drone.io/master/drone.deb
$ sudo dpkg -i drone.deb

This will install the following files:

  • Drone server /usr/local/bin/droned
  • Drone client /usr/local/bin/drone
  • Drone startup script /etc/init/drone.conf
  • Drone sqlite database /var/lib/drone/drone.sqlite

We recommend running Drone on a 2GB Digital Ocean Docker image. This is the fastest, easiest way to get up and running with Drone. This is also how we test Drone internally.

Running

Drone is started automatically. You can start and stop Drone manually with the following commands:

$ sudo start drone
$ sudo stop drone

From Source

The project is hosted at https://github.com/drone/drone and can be installed manually. You will need the latest version of Go (1.2) and the following software packages:

$ sudo apt-get install make mercurial git bzr libsqlite3-dev sqlite3
$ git clone git://github.com/drone/drone.git
$ cd drone
$ make deps
$ make

Enabling SSL

To enable SSL/TLS security on Drone you will need to edit the Upstart script configuration. This file is located at /etc/default/drone.

You will need to change the DRONED_OPTS variable to have three things:

  • Use a different port (Usually --port=:443).
  • The full path to the SSL certificate (--sslcert=/path/to/my.crt)
  • The full path to the SSL certificate's secret key (--sslkey=/path/to/my.key)

Note: Your SSL key should be kept in a safe directory with restrictive permissions. On many Linux systems, /etc/ssl/private is used for this.

Note: If your SSL certificate requires a bundle, it should be appended to the certificate file. E.g. if you have "my-cert.crt" and "my-bundle.crt" then cat my-cert.crt my-bundle.crt >> my-cert-bundle.crt' with --sslcert=/path/to/my-cert-bundle.crt. If you do not know where to place the certificate, /etc/ssl/certs/ is a good candidate.

Here is a complete example:

# Upstart configuration file for droned.

# Command line options:
#
#   -datasource="drone.sqlite":
#   -driver="sqlite3":
#   -port=":8080":
#   -workers="4":
#
DRONED_OPTS="-port=:443 --sslkey=/path/to/my.key --sslcert=/path/to/my.crt"

Once this file has been changed you will need to restart droned before these changes will take effect.

Proxy Server

NOTE: using a proxy server is not really recommended. Drone serves most static content from a CDN and uses the Go standard library's high-performance net/http package to serve dynamic content.

If using Nginx to proxy traffic to Drone, please ensure you have version 1.3.13 or greater. You also need to configure nginx to proxy websocket connections:

# Proxy for websockets
location = /feed {
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header Host $http_host;

    proxy_pass http://127.0.0.1:8080;
    proxy_redirect off;

    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
}

You will also want to change the default port. You can pass the port as a command line argument --port=:8080 or you can change the default port in the /etc/default/drone file:

# Upstart configuration file for droned.

# Command line options:
#
#   -datasource="drone.sqlite":
#   -driver="sqlite3":
#   -path="":
#   -port=":8080":
#
DRONED_OPTS="--port=:8080"