因为Gitlab数据要存放在共享存储，所以本次配置的重头戏倒变成了挂载ISCSI了。
OS:CentOS 7.2
IP：172.16.1.191/192.168.2.191
iSCSI分Target(服务端)[磁盘柜]及Initiator(客户端)[windows,linux]，本次安装的是客户端。
1、安装iSCSI-Initiator工具包：
[root@gitxx-gitlab /]# yum -y install iscsi-initiator-utils
2、配置本机iSCSI名称：
[root@gitxx-gitlab /]# vim /etc/iscsi/initiatorname.iscsi
修改Initiator名称如下：
InitiatorName=iqn.1994-05.com.redhat:gitlab.gitxx.net
3、扫描Target设备的共享卷：
[root@gitxx-gitlab /]# iscsiadm -m discovery -t sendtargets -p 192.168.2.1
192.168.2.1:3260,5 iqn.1995-03.com.dothill:01.array.00c0ff261fd6 192.168.2.2:3260,6 iqn.1995-03.com.dothill:01.array.00c0ff261fd6 192.168.3.1:3260,7 iqn.1995-03.com.dothill:01.array.00c0ff261fd6 192.168.3.2:3260,8 iqn.1995-03.com.dothill:01.array.00c0ff261fd6
4、删除192.168.3.x网段的连接(用2.x网段连接就够用了)
[root@gitxx-gitlab /]# rm -rf /var/lib/iscsi/nodes/iqn.1995-03.com.dothill:01.array.00c0ff261fd6/192.168.3.1\,3260\,7/ [root@gitxx-gitlab /]# rm -rf /var/lib/iscsi/nodes/iqn.1995-03.com.dothill:01.array.00c0ff261fd6/192.168.3.2\,3260\,8/
5、挂载Target设备的共享卷：
[root@gitxx-gitlab /]# iscsiadm -m node -p 192.168.2.1 --login
6、查看挂载存储信息：
[root@gitxx-gitlab /]# fdisk -l
Disk /dev/sdb: 32.0 GB, 31998345216 bytes, 62496768 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 1048576 bytes Disk /dev/sda: 32.0 GB, 31998345216 bytes, 62496768 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 1048576 bytes
7、安装多路径冗余程序：
[root@gitxx-gitlab /]# yum -y install device-mapper-multipath
8、配置多路径冗余(MultiPath)
[root@gitxx-gitlab /]# vim /etc/multipath.conf
写入如下内容：
defaults {
udev_dir /dev
polling_interval 10
path_selector "round-robin 0"
path_grouping_policy multibus
prio alua
path_checker readsector0
failback immediate
no_path_retry fail
user_friendly_names yes
}
9、重启多路径冗余服务：
[root@gitxx-gitlab /]# systemctl restart multipathd.service
10、查看多路径虚拟硬盘：
[root@gitxx-gitlab /]# fdisk -l
Disk /dev/mapper/mpatha: 32.0 GB, 31998345216 bytes, 62496768 sectors Units = sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 4096 bytes I/O size (minimum/optimal): 4096 bytes / 1048576 bytes
11、格式化硬盘：
[root@gitxx-gitlab /]# mkfs.ext4 /dev/mapper/mpatha
12、挂载硬盘：
[root@gitxx-gitlab /]# mkdir /data [root@gitxx-gitlab /]# mount /dev/mapper/mpatha /data
13、添加硬盘自动挂载到启动项:
[root@gitxx-gitlab /]# vim /etc/fstab
在文档末尾添加如下条目(注意设备类型不是Default，而是_netdev)
/dev/mapper/mpatha /data ext4 _netdev 0 0
iscsiadm常用命令：
1.发现iscsi存储: iscsiadm -m discovery -t st -p ISCSI_IP iscsiadm -m discovery -t sendtargets -p 192.168.1.1 2.查看iscsi发现记录 iscsiadm -m node iscsiadm -m node iscsiadm -m node -L all 3.删除iscsi发现记录 iscsiadm -m node -o delete -T LUN_NAME -p ISCSI_IP iscsiadm -m node -U all 4.登录iscsi存储 iscsiadm -m node -T LUN_NAME -p ISCSI_IP -l iscsiadm -m node -T iqn.2001-04.com.example-test -p 192.168.1.1 --login 5.登出iscsi存储 iscsiadm -m node -T LUN_NAME -p ISCSI_IP -u iscsiadm -m node -T iqn.2001-04.com.example-test -p 192.168.1.1 --logout 6 显示会话情况 iscsiadm -m session
--------------------------------------------------------------------------配置Gitlab开始-----------------------------------------------------------------------------
14、添加清华gitlab源
[root@gitxx-gitlab /]# vim /etc/yum.repos.d/gitlab-ce.repo
在文档中添加如下条目：
[gitlab-ce] name=Gitlab CE Repository baseurl=https://mirrors.tuna.tsinghua.edu.cn/gitlab-ce/yum/el$releasever/ gpgcheck=0 enabled=1
[root@gitxx-gitlab /]# yum makecache
15、安装Gitlab社区版:
[root@gitxx-gitlab /]# yum install gitlab-ce
16、初始化Gitlab服务：
[root@gitxx-gitlab /]# gitlab-ctl reconfigure
# 到这里为止就可以通过ip地址来访问Gitlab服务了。接下来配置https服务。
17、创建证书目录，并放入证书：
[root@gitxx-gitlab /]# mkdir /etc/gitlab/ssl [root@gitxx-gitlab /]# ll /etc/gitlab/ssl total 16 -rw-r--r-- 1 root root 4023 Jul 28 14:33 gitxx.crt -rw-r--r-- 1 root root 1957 Jul 28 14:33 gitxx.key -rw-r--r-- 1 root root 3083 Jul 28 14:33 gitxx.pfx -rw-r--r-- 1 root root 769 Jul 28 14:33 gitxx.pem
18、修改Gitlab配置文件：
[root@gitxx-gitlab /]# vim /etc/gitlab/gitlab.rb
修改如下项目:
external_url 'https://git.gitxx.net:8099/'
gitlab_rails['gitlab_email_enabled'] = true
gitlab_rails['gitlab_email_from'] = 'admin@gitxx.cn'
gitlab_rails['gitlab_email_display_name'] = 'admin'
gitlab_rails['gitlab_email_reply_to'] = 'admin@gitxx.cn'
gitlab_rails['gitlab_email_subject_suffix'] = ''
git_data_dirs({ "default" => { "path" => "/data/gitlab-repository", 'gitaly_address' => 'unix:/var/opt/gitlab/gitaly/gitaly.socket' } })
gitlab_rails['smtp_enable'] = true
gitlab_rails['smtp_address'] = "smtp.exmail.qq.com"
gitlab_rails['smtp_port'] = 465
gitlab_rails['smtp_user_name'] = "alert@gitxx.cn"
gitlab_rails['smtp_password'] = "gitxx"
gitlab_rails['smtp_authentication'] = "login"
gitlab_rails['smtp_enable_starttls_auto'] = true
gitlab_rails['smtp_tls'] = true
gitlab_rails['gitlab_email_from'] = 'alert@gitxx.cn'
nginx['enable'] = true
nginx['client_max_body_size'] = '8m'
nginx['redirect_http_to_https'] = true
nginx['redirect_http_to_https'] = true
nginx['ssl_certificate'] = "/etc/gitlab/ssl/gitxx.crt"
nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/gitxx.key"
nginx['ssl_ciphers'] = "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256"
nginx['ssl_protocols'] = "TLSv1 TLSv1.1 TLSv1.2"
nginx['ssl_session_cache'] = "builtin:1000 shared:SSL:10m"
nginx['hsts_max_age'] = 31536000
nginx['hsts_include_subdomains'] = true
logrotate['enable'] = true
pages_external_url "https://site.gitxx.net:8098/"
gitlab_pages['enable'] = true
gitlab_pages['use_http2'] = true
pages_nginx['enable'] = false
gitlab_rails['pages_path'] = "/data/gitlab-pages"
19、修改ningx配置文件：
[root@gitxx-gitlab /]# vim /opt/gitlab/embedded/conf/nginx.conf
删除server项目相关项目，添加如下内容:
# HTTPS server
#
server {
listen 443 ssl;
server_name git.17track.net;
ssl_certificate /etc/gitlab/trusted-certs/dhparam.pem;
ssl_certificate_key /etc/gitlab/trusted-certs/17track.key;
ssl on;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
root html;
index index.html index.htm;
}
}
server {
listen*:80;
server_name git.gitxx.net;
rewrite^(.*)$https://$host$1permanent;
}
20、重启Gitlab服务：
[root@gitxx-gitlab /]# gitlab-ctl restart
21、访问Gitlab服务；
https://172.16.1.191:8099/
root/*******
[THE END]