Part of https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/5577

Matt Kasa authored 4 years ago and DJ Mountney committed 4 years ago

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/223060

- Run the SELinux helper after GitLab Workhorse and other files are
  created ensuring their file contexts are restored
- Place GitLab Workhorse socket files into a sockets directory allowing
  the SELinux file context to be inherited on service restarts
- Add a GitLab Workhorse helper to ensure that new UNIX sockets for
  Workhorse always inherit the proper SELinux file context

Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

Ian Baum authored 4 years ago and DJ Mountney committed 4 years ago

runit_service[sidekiq]

It looks like LWRP resources aren't added to the list at compile time,
so there isn't any runit_service[sidekiq] when notifications are being
setup

Ian Baum authored 4 years ago and DJ Mountney committed 4 years ago

* Curently on 14, which was set to end of life at on April 30, 2020.
* Adds chef-bin gem
* Automatically accept the chef license EULA
* Update chef libraries in Gemfile to newer versions
* Update trigger jobs to use ruby 2.6 image

Signed-off-by: Balasankar "Balu" C <balasankarc@autistici.org>

This reverts merge request !4173

This symlink was used by the rails app to display logs in the admin
interface.

That feature is being removed, so we don't need the symlink anymore.

Balasankar C authored 4 years ago and DJ Mountney committed 4 years ago

Signed-off-by: Balasankar "Balu" C <balasankarc@autistici.org>

This secret is RSA private key used to sign CI_JOB_JWT. The key can be
provided with `gitlab-secrets.json` or `gitlab.rb`, and will be
generated if not provided.

Related to https://gitlab.com/gitlab-org/gitlab/-/issues/214607

Signed-off-by: Balasankar "Balu" C <balasankarc@autistici.org>

Defaults to the same default Redis instance but also allows specifying
a separate Redis instance

Signed-off-by: Balasankar "Balu" C <balasankarc@autistici.org>

that will be used by Pages to talk to the GitLab internal API.

Related to https://gitlab.com/gitlab-org/gitlab/issues/28781.

See omnibus-gitlab/merge_requests/3444#note_194217889 for details.

Related to https://gitlab.com/groups/gitlab-org/-/epics/1316.

We were assuming "covering parent directory of gitlab-rails log directory" will
be enough to cover all the services. However, that isn't the case as
other services can define different log directories.

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Ian Baum authored 5 years ago and DJ Mountney committed 5 years ago

* Add rubocop-rails and rubocop-performance gems
* Update renamed gems in .rubocop.yml
* Auto-correct where possible
* Manually fix remaining gems

If the Redis cache or queue instances are configured and then
unset later, the config files don't get cleaned up, which causes
stale configuration to be preserved. We need to remove these files
if they are no longer needed to ensure the configuration is
consistent.

Related issue:
https://gitlab.com/gitlab-com/gl-infra/production/issues/963

Please enter the commit message for your changes. Lines starting

This reverts merge request !3267

GitLab CE (https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/27581)
added a new secret for GitLab Pages.

This needs to be generated by Omnibus, otherwise Rails will attempt
to write to `secrets.yml` and fail with a permission denied error.

Closes https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4321

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

This adds `gitlab_shell.authorized_keys_file` setting
to `gitlab.yml`.

`gitlab-rails` recipe has been configured to set it based on the
`node['gitlab']['gitlab-shell']['auth_file']`.

This is a step to migrate that setting to gitlab-rails as it won't
be needed by gitlab-shell anymore later on.

MemoryStore is a Redis instance that has disabled commands such as
CLIENT and MONITOR. Sidekiq calls CLIENT to set an ID for debugging, but
this can be disabled by setting the `id` to `nil`
(https://github.com/mperham/sidekiq/issues/3521).

This is done in `/etc/gitlab/gitlab.rb` via:

gitlab_rails['redis_enable_client'] = false

By default, this is set to `true`.

Closes https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4149