CentOS安装gitlab，gerrit，jenkins并配置ci流程

By Wenbin [email protected] 2016/4/9

这是我参考了网上很多的文档，配置了这三个软件在一个机器上，web分别访问8081,8082,8083端口，成功构建了一个ci流程。

版本都是目前最新的版本。

用户

Gitlab: root/wenbindevops , wenbin/12345678

Gerrit: gerrit/gerrit, wenbin/wenbin, jenkins/jenkins

Jenkins: jenkins/jenkins

主机192.168.1.100：root/wb, wenbin/wenbin, gerrit/gerrit, gitlab的用户没有,jenkins的用户在/var/lib/jenkins，但是su – jenkins默认使用的还是root

配置文件

/ect/hosts

192.168.1.100 gitlab.wb.com

192.168.1.100 gerrit.wb.com

192.168.1.100 jenkins.wb.com

$adduser wenbin

$su - wenbin

安装jenkins

源配置：

sudo wget -O /etc/yum.repos.d/jenkins.repo http://pkg.jenkins-ci.org/redhat/jenkins.repo
sudo rpm --import https://jenkins-ci.org/redhat/jenkins-ci.org.key
sudo yum install jenkins

安装java，1.7以上版本

sudo yum install java

开启服务设置开机启动

sudo systemctl
enable jenkins
sudo
systemctl start jenkins

防火墙设置

firewall-cmd
--zone=public --add-port=8080/tcp --permanent

firewall-cmd
--zone=public --add-service=http --permanent

firewall-cmd --reload

firewall-cmd
--list-all

最后访问 localhost:8080 即可访问

jenkins配置文件在vim /etc/sysconfig/jenkins

用户在/var/lib/jenkins/

可以修改访问的端口等设置

改为访问8083端口

安装gitlab

(VENV)[wenbin@mail ~]$ sudo yum install
openssh-server postfix cronie

(VENV)[wenbin@mail ~]$ sudo systemctl
enable postfix

(VENV)[wenbin@mail ~]$ sudo systemctl
start postfix

使用清华大学同步的源，因为安装官网的教程访问不了，可以FQ的请忽略

curl https://packages.gitlab.com/gpg.key
2> /dev/null | sudo apt-key add - &>/dev/null

sudo vi /etc/yum.repos.d/gitlab-ce.repo

[gitlab-ce]

name=gitlab-ce

baseurl=http://mirrors.tuna.tsinghua.edu.cn/gitlab-ce/yum/el7

repo_gpgcheck=0

gpgcheck=0

enabled=1

gpgkey=https://packages.gitlab.com/gpg.key

sudo yum makecache

sudo yum install gitlab-ce

sudo vim /etc/gitlab/gitlab.rb

将external_url = 'http://git.example.com'修改为http://gitlab.wb.com:8081

sudo gitlab-ctl
reconfigure

直接在浏览器访问刚才修改的自己的ip或者域名，就能看到gitlab的页面了，登陆用下面的用户名和密码。

Username: root

Password: 5iveL!fe

登陆后会要求你更改密码的。

配置smtp

改为wenbindevops

$ sudo vi
/etc/gitlab/gitlab.rb

# Change the
external_url to the address your users will type in their browser

external_url
'http://xxhost.com'

#Sending application
email via SMTP

gitlab_rails['smtp_enable']
= true

gitlab_rails['smtp_address']
= "smtp.163.com"

gitlab_rails['smtp_port']
= 25

gitlab_rails['smtp_user_name']
= "[email protected]"

gitlab_rails['smtp_password']
= "xxpassword"

gitlab_rails['smtp_domain']
= "163.com"

gitlab_rails['smtp_authentication']
= :login

gitlab_rails['smtp_enable_starttls_auto']
= true

##修改gitlab配置的发信人

gitlab_rails['gitlab_email_from']
= "[email protected]"

user["git_user_email"]
= [email protected]

sudo gitlab-ctl
reconfigure

[root@mail .ssh]#
ssh-keygen -C [email protected]

Generating
public/private rsa key pair.

Enter file in which
to save the key (/root/.ssh/id_rsa):

Enter passphrase
(empty for no passphrase):

Enter same passphrase
again:

Your identification
has been saved in /root/.ssh/id_rsa.

Your public key has
been saved in /root/.ssh/id_rsa.pub.

The key fingerprint
is:

8a:be:f6:ef:29:94:48:83:ba:50:e7:5c:27:50:5d:eb
[email protected]

The key's randomart
image is:

+--[ RSA 2048]----+

| ... ..
|

| .
. . |

| . .
. |

| o + o ..
|

| o = + +S E |

|o +.o.
|

|.. ...
|

|. .. .
. |

| .oo.++
|

+-----------------+

[root@mail .ssh]#

[root@mail .ssh]# cat
id_rsa

id_rsa id_rsa.pub

[root@mail .ssh]# cat
id_rsa.pub

ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAABAQCnJh76O8cllIjybl5SOJt9PL08Oz146SHoi8hjiRTxyv3o2DW0aermehP5Y9cGhWRmWJV7UJWtPZwXjAlwYQ6MHy6lMqWrpRWnJ93tRGZ8moyQ1Z141EWQExO+0GK7L1B+5S9XkmPTongXEgD2ncFkx4A4+XoiqOKVghl9RSLsYUaDYUPI64aep6RVaf1MxeZ3ZO6lcP+9yU5o6nxV7oZY05g0enM2gmTws02lWRQ2NM2CKcxr1ds0rbLahjmgOsmweiuWfIaReOOivpP97zQDAH7A2doYYEBYGWqy5S3itggQqW/C/w2f8A4iGFnhcVfa48JP5MqGkpIq90waxyi1
[email protected]

[root@mail .ssh]#

密码是12345678

然后去邮箱确认。

[wenbin@mail ~]$
ssh-keygen -C [email protected]

Generating
public/private rsa key pair.

Enter file in which
to save the key (/home/wenbin/.ssh/id_rsa):

Created directory
'/home/wenbin/.ssh'.

Enter passphrase
(empty for no passphrase):

Enter same passphrase
again:

Your identification
has been saved in /home/wenbin/.ssh/id_rsa.

Your public key has
been saved in /home/wenbin/.ssh/id_rsa.pub.

The key fingerprint
is:

b8:16:48:86:b5:e0:a2:ae:ed:f9:1e:d2:e3:48:2a:31
[email protected]

The key's randomart
image is:

+--[ RSA 2048]----+

| . .
|

| . + . |

|. o + |

|.. o . . |

|. . o S
|

|E .
o |

| +o + o |

|o+ = + |

|+.=o+ |

+-----------------+

[wenbin@mail ~]$ cat
.ssh/id_rsa.pub

ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAABAQDSAm+x3IJMFRQvMmXKke3vakAojTT0O6egaInMs578vQaQMZT2DpHr1iZ9gQy3mdkcapLQeZdHVnGa5Wp7S0wlAvSeUc11mKoRWa4gIbALxPb3n5wbpszMMvvZWLcaMUz8HtPeRHQIhATQj6b6Zz3Ef11HEJ9a4TzPzAHkLlFaB5EXTdnbMDK14r1vkuGw2aOsFF6y3D7pROv7zzb5pz2p24r84a9nXeo8wD9tmp7xb9pwLRgRs2IhklZoxlwl6COc9Zy1gMJPzOboCeEGlwr1zHn1IfMIs/DgedUM7WWS3ZcirE6jX39dRgFC6GK8unTK2WYJoUKLqNBcAmeii3AJ
[email protected]

安装gerrit

修改/etc/selinux/config
文件

将SELINUX=enforcing改为SELINUX=disabled

vim /etc/profile

export JAVA_HOME=/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.99-2.6.5.0.el7_2.x86_64

export JRE_HOME=$JAVA_HOME/jre

export
CLASSPATH=$JAVA_HOME/lib:$JRE_HOME/lib:$CLASSPATH

export
PATH=$JAVA_HOME/bin:$JRE_HOME/bin:$PATH

reboot

安装配置mysql

su – wenbin

sudo wget http://repo.mysql.com/mysql-community-release-el7-5.noarch.rpm

sudo rpm -ivh
mysql-community-release-el7-5.noarch.rpm

sudo yum install mysql-server mysql-client libmysqlclient-dev

mysql_install_db

systemctl start mysqld.service

mysql –u root –p

drop database gerritdb;

create database gerritdb;

GRANT ALL PRIVILEGES ON gerritdb.* TO
'gerrituser'@'localhost' IDENTIFIED BY 'gerritpass';

GRANT ALL PRIVILEGES ON gerritdb.* TO
'gerrituser'@'%' IDENTIFIED BY 'gerritpass';

adduser gerrit

passwd gerrit

su – gerrit

wget https://www.gerritcodereview.com/download/gerrit-2.12.2.war

[gerrit@mail ~]$ java -jar
gerrit-2.12.2.war init -d review_site

Using secure store:
com.google.gerrit.server.securestore.DefaultSecureStore

*** Gerrit Code Review 2.12.2

***

*** Git Repositories

***

Location of Git repositories [/home/gerrit/git]:

*** SQL Database

***

Database server type [mysql]:

Server hostname [localhost]:

Server port [(mysql default)]:

Database name [gerritdb]:

Database username [gerrituser]:

Change gerrituser's password [y/N]?

*** Index

***

Type [LUCENE/?]:

The index must be rebuilt before starting
Gerrit:

java -jar gerrit.war reindex -d site_path

*** User Authentication

***

Authentication method [HTTP/?]:

Get username from custom HTTP header [y/N]?
n

SSO logout URL :

Enable signed push support [y/N]? n

*** Email Delivery

***

SMTP server hostname [smtp.163.com]:

SMTP server port [25]:

SMTP encryption [NONE/?]:

SMTP username [gerritsdfl]:
[email protected]

[email protected]'s password :

confirm password :

*** Container Process

***

Run as [gerrit]:

Java runtime
[/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.99-2.6.5.0.el7_2.x86_64/jre]:

Upgrade review_site/bin/gerrit.war [Y/n]? y

Copying gerrit-2.12.2.war to
review_site/bin/gerrit.war

*** SSH Daemon

***

Listen on address [*]:

Listen on port [29418]:

*** HTTP Daemon

***

Behind reverse proxy [Y/n]? y

Proxy uses SSL (https://) [y/N]? n

Subdirectory on proxy server [/]:

Listen on address [*]:

Listen on port [8082]: 8088

Canonical URL [http://mail.wenbin.com/]:
http://gerrit.wb.com:8082

*** Plugins

***

Installing plugins.

Install plugin singleusergroup version
v2.12.2 [Y/n]? y