Can't get gitlab-ci and gitlab run on the same host

Hello there!

I've got ubuntu 12.04 host and two DNS records pointing to it.

git.example.com and ci.example.com # well not that addresses but I use them here :)

gitlab runs well, but I can't authorize gitlab-ci.

After I press "login with gitlab" on gitlab-ci page. It tries to send me to ci.example.com for authorize. I get it and changed ci.example.com to git.example.com , but after I press authorize app It does nothing after timeout I see 502 error with address:

http://ci.example.com/user_sessions/callback?code=somecode

For some reason gitlab-ci thinks that my gitlab instance also runs on ci.example.com on gitlab-ci login page I see:

Login using GitLab account

Make sure you have account on GitLab server http://ci.example.com

Why is that happening?

Did you do generate the app_id and app_secret like mentioned in the setup documentation ?

yes, I did.

Hey swex, can you provide some logs (production of gitlab_ci for example) ?

Can you show your gitlab.rb?

Here is production.log with error. I think something with nginx settings.

Completed 200 OK in 42ms (Views: 32.2ms | ActiveRecord: 6.1ms)
Started GET "/user_sessions/new?return_to=%2F" for 176.14.73.67 at 2015-05-23 11:46:50 +0300
Processing by UserSessionsController#new as HTML
  Parameters: {"return_to"=>"/"}
  Rendered user_sessions/new.html.haml within layouts/application (2.7ms)
  Rendered layouts/_head.html.haml (3.7ms)
  Rendered layouts/_nav.html.haml (6.4ms)
  Rendered layouts/_info.html.haml (2.5ms)
Completed 200 OK in 22ms (Views: 19.9ms | ActiveRecord: 0.7ms)
Started GET "/user_sessions/auth" for 176.14.73.67 at 2015-05-23 11:46:51 +0300
Processing by UserSessionsController#auth as HTML
Redirected to http://ci.example.com/oauth/authorize?client_id=XXX&redirect_uri=http%3A%2F%2Fci.example.com%2Fuser_sessions%2Fcallback&response_type=code
Completed 302 Found in 10ms (ActiveRecord: 0.7ms)
Started GET "/oauth/authorize?client_id=XXX&redirect_uri=http%3A%2F%2Fci.example.com%2Fuser_sessions%2Fcallback&response_type=code" for 176.14.73.67 at 2015-05-23 11:46:51 +0300

ActionController::RoutingError (No route matches [GET] "/oauth/authorize"):
  actionpack (4.1.9) lib/action_dispatch/middleware/debug_exceptions.rb:21:in `call'
  actionpack (4.1.9) lib/action_dispatch/middleware/show_exceptions.rb:30:in `call'
  railties (4.1.9) lib/rails/rack/logger.rb:38:in `call_app'
  railties (4.1.9) lib/rails/rack/logger.rb:20:in `block in call'
  activesupport (4.1.9) lib/active_support/tagged_logging.rb:68:in `block in tagged'
  activesupport (4.1.9) lib/active_support/tagged_logging.rb:26:in `tagged'
  activesupport (4.1.9) lib/active_support/tagged_logging.rb:68:in `tagged'
  railties (4.1.9) lib/rails/rack/logger.rb:20:in `call'
  actionpack (4.1.9) lib/action_dispatch/middleware/request_id.rb:21:in `call'
  rack (1.5.2) lib/rack/methodoverride.rb:21:in `call'
  rack (1.5.2) lib/rack/runtime.rb:17:in `call'
  activesupport (4.1.9) lib/active_support/cache/strategy/local_cache_middleware.rb:26:in `call'
  rack (1.5.2) lib/rack/sendfile.rb:112:in `call'
  railties (4.1.9) lib/rails/engine.rb:514:in `call'
  railties (4.1.9) lib/rails/application.rb:144:in `call'
  railties (4.1.9) lib/rails/railtie.rb:194:in `public_send'
  railties (4.1.9) lib/rails/railtie.rb:194:in `method_missing'
  rack (1.5.2) lib/rack/builder.rb:138:in `call'
  rack (1.5.2) lib/rack/urlmap.rb:65:in `block in call'
  rack (1.5.2) lib/rack/urlmap.rb:50:in `each'
  rack (1.5.2) lib/rack/urlmap.rb:50:in `call'
  unicorn (4.8.2) lib/unicorn/http_server.rb:572:in `process_client'
  unicorn (4.8.2) lib/unicorn/http_server.rb:666:in `worker_loop'
  unicorn (4.8.2) lib/unicorn/http_server.rb:521:in `spawn_missing_workers'
  unicorn (4.8.2) lib/unicorn/http_server.rb:140:in `start'
  unicorn (4.8.2) bin/unicorn:126:in `<top (required)>'
  /opt/gitlab/embedded/service/gem/ruby/2.1.0/bin/unicorn:23:in `load'
  /opt/gitlab/embedded/service/gem/ruby/2.1.0/bin/unicorn:23:in `<main>'

Here is my gitlab.rb I've replaced real host with example.com and real secrets with XXX

external_url 'https://git.example.com'
nginx['redirect_http_to_https'] = true
unicorn['worker_processes'] = 3
unicorn['worker_timeout'] = 120
gitlab_rails['gitlab_shell_ssh_port'] = 222
gitlab_rails['git_max_size'] = 20971520
gitlab_rails['git_timeout'] = 300
gitlab_rails['satellites_timeout'] = 300

gitlab_rails['gitlab_email_from'] = 'gitbot@example.com'
gitlab_rails['smtp_enable'] = true
gitlab_rails['smtp_address'] = "mail.example.com"
gitlab_rails['smtp_port'] = 25
gitlab_rails['smtp_user_name'] = "gitbot@example.com"
gitlab_rails['smtp_password'] = "XXX"
gitlab_rails['smtp_domain'] = "example.com"
gitlab_rails['smtp_authentication'] = "login"
gitlab_rails['smtp_enable_starttls_auto'] = true

gitlab_rails['omniauth_enabled'] = false
gitlab_rails['omniauth_allow_single_sign_on'] = false
gitlab_rails['block_auto_created_users'] = true

ci_external_url 'http://ci.example.com'
gitlab_ci['gitlab_server'] = { 'url' => 'http://ci.example.com', 'app_id' => "XXX", 'app_secret' => 'XXX'}

@swex You have an error at gitlab_ci['gitlab_server'], it should say

gitlab_ci['gitlab_server'] = { 'url' => 'https://git.example.com', 'app_id' => "XXX", 'app_secret' => 'XXX'}

Notice the different url, not http://ci.example.com

For client side nothing changed here is gitlab-ci production.log:

Started GET "/" for ip_addr at 2015-06-02 18:13:50 +0300
Processing by ProjectsController#index as HTML
  Rendered projects/_public.html.haml (20.0ms)
  Rendered projects/index.html.haml within layouts/application (24.7ms)
  Rendered layouts/_head.html.haml (3.9ms)
  Rendered layouts/_nav.html.haml (6.5ms)
  Rendered layouts/_info.html.haml (2.5ms)
Completed 200 OK in 48ms (Views: 37.8ms | ActiveRecord: 6.4ms)
Started GET "/user_sessions/auth" for ip_addr at 2015-06-02 18:13:54 +0300
Processing by UserSessionsController#auth as HTML
Redirected to https://git.example.com/oauth/authorize?client_id=00858124e9e9b4ffbe46b956af2adb7403cc1042ed7a2f6c417d16557924a297&redirect_uri=http%3A%2F%2Fci.example.com%2Fuser_sessions%2Fcallback&response_type=code
Completed 403 Forbidden in 11ms (ActiveRecord: 0.7ms)
Started GET "/user_sessions/auth" for ip_addr at 2015-06-02 18:13:54 +0300
Processing by UserSessionsController#auth as HTML
Redirected to https://git.example.com/oauth/authorize?client_id=00858124e9e9b4ffbe46b956af2adb7403cc1042ed7a2f6c417d16557924a297&redirect_uri=http%3A%2F%2Fci.example.com%2Fuser_sessions%2Fcallback&response_type=code
Completed 302 Found in 4ms (ActiveRecord: 0.7ms)
Started GET "/user_sessions/callback?code=a0ea65b5bf8d034eac7da477a98dec53fff74afacca28b52dee80d0460ca90df" for ip_addr at 2015-06-02 18:13:58 +0300
Processing by UserSessionsController#callback as HTML
  Parameters: {"code"=>"a0ea65b5bf8d034eac7da477a98dec53fff74afacca28b52dee80d0460ca90df"}

For client side nothing changed

Considering that now you are getting 403 forbidden it seems that something did change. Can you remove the authorization from GitLab, create new app_id and app_secret, update gitlab.rb with new credentials and reconfigure?

I tried and here is new log:

Started GET "/" for IP_ADDR at 2015-06-03 14:19:10 +0300
Processing by ProjectsController#index as HTML
  Rendered projects/_public.html.haml (3.3ms)
  Rendered projects/index.html.haml within layouts/application (3.8ms)
  Rendered layouts/_head.html.haml (0.9ms)
  Rendered layouts/_nav.html.haml (0.7ms)
  Rendered layouts/_info.html.haml (0.2ms)
Completed 200 OK in 11ms (Views: 5.9ms | ActiveRecord: 2.0ms)
Started GET "/user_sessions/auth" for IP_ADDR at 2015-06-03 14:19:16 +0300
Processing by UserSessionsController#auth as HTML
Redirected to https://git.example.com/oauth/authorize?client_id=0c702af461fa3f2c9711779c25b9d25ad873b79e6869cf9b80621c9c25dcb857&redirect_uri=http%3A%2F%2Fci.example.com%2Fuser_sessions%2Fcallback&response_type=code
Completed 403 Forbidden in 37ms (ActiveRecord: 11.4ms)
Started GET "/user_sessions/auth" for IP_ADDR at 2015-06-03 14:19:16 +0300
Processing by UserSessionsController#auth as HTML
Redirected to https://git.example.com/oauth/authorize?client_id=0c702af461fa3f2c9711779c25b9d25ad873b79e6869cf9b80621c9c25dcb857&redirect_uri=http%3A%2F%2Fci.example.com%2Fuser_sessions%2Fcallback&response_type=code
Completed 302 Found in 31ms (ActiveRecord: 11.2ms)
Started GET "/user_sessions/callback?code=f5bcb80e845e581cb48ffac681ff219abdb37ac0881c8dfcde87abdc9d6ed838" for IP_ADDR at 2015-06-03 14:19:23 +0300
Processing by UserSessionsController#callback as HTML
  Parameters: {"code"=>"f5bcb80e845e581cb48ffac681ff219abdb37ac0881c8dfcde87abdc9d6ed838"}

I just see 502 error after pressing Authorise button in gitlab webui

The only way I can get something close to this behaviour is if I have a wrong callback url set in https://git.example.com/admin/applications/. What is the callback url you have set in GitLab for "GitLab CI" authorization?

I have http://ci.example.com/user_sessions/callback

That should be correct. Assuming that you have correct credentials in gitlab_ci['gitlab_server'] = { 'url' => 'https://git.example.com', 'app_id' => "XXX", 'app_secret' => 'XXX'} I am not sure what else could be going wrong. I am not sure what else to suggest (short of trying to restart with gitlab-ctl restart).

@vsizov Do you have any ideas why a user would keep getting 502 when trying to Authorise GitLab CI with GitLab?

yes there are right options in ```gitlab.rb`` also.

Maybe nginx['redirect_http_to_https'] = true can cause this?

@swex This route exist ActionController::RoutingError (No route matches [GET] "/oauth/authorize"):

I's weird.

Have you changed a codebase?

@vsizov That error was before this https://gitlab.com/gitlab-org/omnibus-gitlab/issues/586#note_1321156 .

@swex Can you look at unicorn logs?

Why do you have two requests to "/user_sessions/auth"? First one response with 403 and second with 302? I don't understand.

@vsizov no I didn't change code in any way, just gitlab.rb so I use default omnibus packages, I also have good history of successful updates. From version 5.x to current. What exactly logs do I need to provide?

I have the same problem.

You can see the full log from "Login with GitLab" to the Error 500.

==> /var/log/gitlab/gitlab-ci/production.log <==
Started GET "/" for xx.xx.xx.xx at 2015-06-18 16:00:37 +0200
Processing by ProjectsController#index as HTML
  Rendered projects/_public.html.haml (45.7ms)
  Rendered projects/index.html.haml within layouts/application (61.4ms)
  Rendered layouts/_head.html.haml (10.9ms)
  Rendered layouts/_nav.html.haml (17.3ms)
  Rendered layouts/_info.html.haml (6.7ms)
Completed 200 OK in 137ms (Views: 108.5ms | ActiveRecord: 17.6ms)

==> /var/log/gitlab/nginx/gitlab_ci_access.log <==
127.0.0.1 - - [18/Jun/2015:16:00:37 +0200] "GET / HTTP/1.0" 200 860 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"
xx.xx.xx.xx - - [18/Jun/2015:16:00:37 +0200] "GET / HTTP/1.1" 200 872 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"

==> /var/log/gitlab/gitlab-ci/production.log <==
Started GET "/user_sessions/auth" for xx.xx.xx.xx at 2015-06-18 16:00:40 +0200
Processing by UserSessionsController#auth as HTML
Redirected to http://git.domain.com/oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code
Completed 403 Forbidden in 13ms (ActiveRecord: 1.5ms)

==> /var/log/gitlab/nginx/gitlab_ci_access.log <==
127.0.0.1 - - [18/Jun/2015:16:00:40 +0200] "GET /user_sessions/auth HTTP/1.0" 403 221 "http://ci.domain.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"
xx.xx.xx.xx - - [18/Jun/2015:16:00:40 +0200] "GET /user_sessions/auth HTTP/1.1" 403 232 "http://ci.domain.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"

==> /var/log/gitlab/gitlab-ci/production.log <==
Started GET "/user_sessions/auth" for xx.xx.xx.xx at 2015-06-18 16:00:40 +0200
Processing by UserSessionsController#auth as HTML
Redirected to http://git.domain.com/oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code
Completed 302 Found in 14ms (ActiveRecord: 5.5ms)

==> /var/log/gitlab/nginx/gitlab_ci_access.log <==
127.0.0.1 - - [18/Jun/2015:16:00:40 +0200] "GET /user_sessions/auth HTTP/1.0" 302 264 "http://ci.domain.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"
xx.xx.xx.xx - - [18/Jun/2015:16:00:40 +0200] "GET /user_sessions/auth HTTP/1.1" 302 276 "http://ci.domain.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"

==> /var/log/gitlab/gitlab-rails/production.log <==
Started GET "/oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code" for xx.xx.xx.xx at 2015-06-18 16:00:40 +0200
Processing by Oauth::AuthorizationsController#new as HTML
  Parameters: {"client_id"=>"b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe", "redirect_uri"=>"http://ci.domain.com/user_sessions/callback", "response_type"=>"code"}
Completed 200 OK in 261ms (Views: 202.1ms | ActiveRecord: 41.4ms)

==> /var/log/gitlab/nginx/gitlab_access.log <==
127.0.0.1 - - [18/Jun/2015:16:00:40 +0200] "GET /oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code HTTP/1.0" 200 2616 "http://ci.domain.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"
xx.xx.xx.xx - - [18/Jun/2015:16:00:40 +0200] "GET /oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code HTTP/1.1" 200 2628 "http://ci.domain.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"

==> /var/log/gitlab/gitlab-rails/production.log <==
Started POST "/oauth/authorize" for xx.xx.xx.xx at 2015-06-18 16:00:42 +0200
Processing by Oauth::AuthorizationsController#create as HTML
  Parameters: {"utf8"=>"✓", "authenticity_token"=>"[FILTERED]", "client_id"=>"b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe", "redirect_uri"=>"http://ci.domain.com/user_sessions/callback", "state"=>"", "response_type"=>"code", "scope"=>"api"}
Redirected to http://ci.domain.com/user_sessions/callback?code=e1098e12e7920be9c175b4f11e8b6e4d54a447ff46b95bb87d1528b0a5878e10
Completed 302 Found in 71ms (ActiveRecord: 42.7ms)

==> /var/log/gitlab/nginx/gitlab_access.log <==
127.0.0.1 - - [18/Jun/2015:16:00:42 +0200] "POST /oauth/authorize HTTP/1.0" 302 175 "http://git.domain.com/oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"
xx.xx.xx.xx - - [18/Jun/2015:16:00:42 +0200] "POST /oauth/authorize HTTP/1.1" 302 186 "http://git.domain.com/oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"

==> /var/log/gitlab/gitlab-ci/production.log <==
Started GET "/user_sessions/callback?code=e1098e12e7920be9c175b4f11e8b6e4d54a447ff46b95bb87d1528b0a5878e10" for xx.xx.xx.xx at 2015-06-18 16:00:42 +0200
Processing by UserSessionsController#callback as HTML
  Parameters: {"code"=>"e1098e12e7920be9c175b4f11e8b6e4d54a447ff46b95bb87d1528b0a5878e10"}
Completed 500 Internal Server Error in 19ms

OAuth2::Error (<html>
<head><title>404 Not Found</title></head>
<body bgcolor="white">
<center><h1>404 Not Found</h1></center>
<hr><center>nginx</center>
</body>
</html>
):
  app/controllers/user_sessions_controller.rb:18:in `callback'



==> /var/log/gitlab/nginx/gitlab_ci_access.log <==
127.0.0.1 - - [18/Jun/2015:16:00:42 +0200] "GET /user_sessions/callback?code=e1098e12e7920be9c175b4f11e8b6e4d54a447ff46b95bb87d1528b0a5878e10 HTTP/1.0" 500 348 "http://git.domain.com/oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"
xx.xx.xx.xx - - [18/Jun/2015:16:00:42 +0200] "GET /user_sessions/callback?code=e1098e12e7920be9c175b4f11e8b6e4d54a447ff46b95bb87d1528b0a5878e10 HTTP/1.1" 500 348 "http://git.domain.com/oauth/authorize?client_id=b2f732c0d48720842a0306263a02028a31365f88eb0011d24837773016a11bfe&redirect_uri=http%3A%2F%2Fci.domain.com%2Fuser_sessions%2Fcallback&response_type=code" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.124 Safari/537.36"

Is there any progress on this issue?

@marin Maybe people can try the new GitLab that autoconfigures CI?

@marin Or is that what is causing this problem?

@sytses actually I think that @oomathias and me have different problems. Here is mine log again:

Started POST "/oauth/authorize" for my_ip_addr at 2015-07-07 18:58:19 +0300
Processing by Oauth::AuthorizationsController#create as HTML
  Parameters: {"utf8"=>"✓", "authenticity_token"=>"[FILTERED]", "client_id"=>"auth_id", "redirect_uri"=>"http://ci.my_host.com/user_sessions/callback", "state"=>"", "response_type"=>"code", "scope"=>"api"}
Redirected to http://ci.my_host.com/user_sessions/callback?code=callback_code
Completed 302 Found in 169ms (ActiveRecord: 101.6ms)

==> /var/log/gitlab/nginx/gitlab_access.log <==
my_ip_addr - - [07/Jul/2015:18:58:19 +0300] "POST /oauth/authorize HTTP/1.1" 302 191 "https://git.my_host.com/oauth/authorize?client_id=auth_id&redirect_uri=http%3A%2F%2Fci.my_host.com%2Fuser_sessions%2Fcallback&response_type=code" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0"

==> /var/log/gitlab/gitlab-ci/production.log <==
Started GET "/user_sessions/callback?code=callback_code" for my_ip_addr at 2015-07-07 18:58:19 +0300
Processing by UserSessionsController#callback as HTML
  Parameters: {"code"=>"callback_code"}

==> /var/log/gitlab/ci-unicorn/unicorn_stderr.log <==
E, [2015-07-07T18:59:20.669324 #30998] ERROR -- : worker=2 PID:31105 timeout (61s > 60s), killing

==> /var/log/gitlab/nginx/gitlab_ci_error.log <==
2015/07/07 18:59:20 [error] 31013#0: *5 upstream prematurely closed connection while reading response header from upstream, client: my_ip_addr, server: ci.my_host.com, request: "GET /user_sessions/callback?code=callback_code HTTP/1.1", upstream: "http://unix:/var/opt/gitlab/gitlab-ci/sockets/gitlab.socket:/user_sessions/callback?code=callback_code", host: "ci.my_host.com"

==> /var/log/gitlab/nginx/gitlab_ci_access.log <==
my_ip_addr - - [07/Jul/2015:18:59:20 +0300] "GET /user_sessions/callback?code=callback_code HTTP/1.1" 502 166 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:38.0) Gecko/20100101 Firefox/38.0"

==> /var/log/gitlab/ci-unicorn/unicorn_stderr.log <==
E, [2015-07-07T18:59:20.674389 #30998] ERROR -- : reaped #<Process::Status: pid 31105 SIGKILL (signal 9)> worker=2
I, [2015-07-07T18:59:20.678063 #696]  INFO -- : worker=2 spawned pid=696
I, [2015-07-07T18:59:20.678634 #696]  INFO -- : worker=2 ready

@swex Thanks, but I don't understand this stuff, we depend on @marin here

@swex Can you show output of this:

cat /etc/gitlab/gitlab.rb | grep external_url
cat /etc/gitlab/gitlab-secrets.json 

@ayufan sure

cat /etc/gitlab/gitlab.rb | grep external_url
# Check and change the external_url to the address your users will type in their browser
external_url 'https://git.my_host.com'
ci_external_url 'http://ci.my_host.com'
root@bntu:/tmp# cat /etc/gitlab/gitlab-secrets.json 
{
  "gitlab_shell": {
    "secret_token": "123"
  },
  "gitlab_rails": {
    "secret_token": "123"
  },
  "gitlab_ci": {
    "secret_token": "123",
    "gitlab_server": {
      "url": "https://git.my_host.com",
      "app_id": "123",
      "app_secret": "123"
    }
  }
}

I replaced real host with my_host.com and all tokens with 123.

@swex Try to do this from the server's command line (where the GitLab is installed):

curl --verbose https://git.my_host.com/oauth/token

@swex It should point to local GitLab instance. You can check nginx logs for GitLab that something is happening there.

@ayufan thank you very much your point about curl... Now I understand that gitlab instance itself can't get to itself by external url... Corp network firewall rules and routing pretty strict. Again sorry. Bug may be closed.

@swex You can put GitLab hostname to /etc/hosts and point it to 127.0.0.1.

@ayufan yes. Thats exactly how I fixed this trouble.

@marin Maybe we should advice users to add used hostname (GitLab's) to /etc/hosts?

/cc @jacobvosmaer

Status changed to closed

Status changed to reopened

@ayufan let's not close this until we document the solution.

Status changed to closed by commit 3d307105

@swex How did you even get them to work on same host? At least you are able to get to the ci landing page

for me nginx won't start at all and give me this error

015/11/06 21:52:59 [emerg] 29122#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
2015/11/06 21:52:59 [emerg] 29122#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
2015/11/06 21:52:59 [emerg] 29122#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
2015/11/06 21:52:59 [emerg] 29122#0: bind() to 0.0.0.0:80 failed (98: Address already in use)
2015/11/06 21:52:59 [emerg] 29122#0: bind() to 0.0.0.0:80 failed (98: Address already in use)

https://gitlab.com/gitlab-org/omnibus-gitlab/issues/931