Trying to get Gitlab CE with an existing nginx setup. :

How to Use GitLab Self-managed
1

I have a server that already has nginx setup with a few virtual host, on a CentOS 7

I have done the following changes to my /etc/gitlab/gitlab.rb

nginx[‘enable’] = false

web_server[‘extrernal_users’] = [‘ngixn’]

I have setup trusted proxies and I setup gitlab_workhorse to tcp and listening to 127.0.0.1:8282

When I got to run gitlab-ctl configure to update, I get the following error

[root@tower01 html]# gitlab-ctl reconfigure
Starting Chef Client, version 13.6.4
resolving cookbooks for run list: [“gitlab”]
Synchronizing Cookbooks:

  • gitlab (0.0.1)
  • registry (0.1.0)
  • package (0.1.0)
  • mattermost (0.1.0)
  • consul (0.0.0)
  • gitaly (0.1.0)
  • nginx (0.1.0)
  • letsencrypt (0.1.0)
  • postgresql (0.1.0)
  • runit (0.14.2)
  • acme (3.1.0)
  • crond (0.1.0)
  • compat_resource (12.19.0)
    Installing Cookbook Gems:
    I Compiling Cookbooks…
    Recipe: gitlab::default

  • directory[/etc/gitlab] action create (up to date)
    Converging 430 resources

  • directory[/etc/gitlab] action create (up to date)

  • directory[Create /var/opt/gitlab] action create (up to date)

  • directory[/opt/gitlab/embedded/etc] action create (up to date)

  • template[/opt/gitlab/embedded/etc/gitconfig] action create (up to date)
    Recipe: gitlab::web-server

  • account[Webserver user and group] action create

    • group[Webserver user and group] action create

      ================================================================================
      Error executing action create on resource ‘group[Webserver user and group]’

      Mixlib::ShellOut::ShellCommandFailed

      Expected process to exit with [0], but received ‘3’
      ---- Begin output of [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] ----
      STDOUT:
      STDERR: gpasswd: user ‘{“enable”=>false, “proxy_set_headers”=>{“Host”=>"$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}’ does not exist
      ---- End output of [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] ----
      Ran [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] returned 3

      Resource Declaration:

      In /opt/gitlab/embedded/cookbooks/cache/cookbooks/package/resources/account.rb

      38: group new_resource.name do
      39: group_name new_resource.groupname
      40: gid new_resource.gid
      41: system new_resource.system
      42: if new_resource.append_to_group
      43: append true
      44: members new_resource.group_members
      45: end
      46: action :create

      Compiled Resource:

      Declared in /opt/gitlab/embedded/cookbooks/cache/cookbooks/package/resources/account.rb:38:in `block in class_from_file’

      group(“Webserver user and group”) do
      action [:create]
      default_guard_interpreter :default
      group_name “gitlab-www”
      gid 988
      members [{“enable”=>false, “proxy_set_headers”=>{“Host”=>"$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}]
      append true
      declared_type :group
      cookbook_name “gitlab”
      system true
      end

      System Info:

      chef_version=13.6.4
      platform=redhat
      platform_version=7.4
      ruby=ruby 2.4.4p296 (2018-03-28 revision 63013) [x86_64-linux]
      program_name=/opt/gitlab/embedded/bin/chef-client
      executable=/opt/gitlab/embedded/bin/chef-client

    ================================================================================
    Error executing action create on resource ‘account[Webserver user and group]’

    Mixlib::ShellOut::ShellCommandFailed

    group[Webserver user and group] (/opt/gitlab/embedded/cookbooks/cache/cookbooks/package/resources/account.rb line 38) had an error: Mixlib::ShellOut::ShellCommandFailed: Expected process to exit with [0], but received ‘3’
    ---- Begin output of [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] ----
    STDOUT:
    STDERR: gpasswd: user ‘{“enable”=>false, “proxy_set_headers”=>{“Host”=>"$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}’ does not exist
    ---- End output of [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] ----
    Ran [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] returned 3

    Resource Declaration:

    In /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/recipes/web-server.rb

    27: account “Webserver user and group” do
    28: username webserver_username
    29: uid node[‘gitlab’][‘web-server’][‘uid’]
    30: ugid webserver_group
    31: groupname webserver_group
    32: gid node[‘gitlab’][‘web-server’][‘gid’]
    33: shell node[‘gitlab’][‘web-server’][‘shell’]
    34: home node[‘gitlab’][‘web-server’][‘home’]
    35: append_to_group external_webserver_users.any?
    36: group_members external_webserver_users
    37: manage_home false
    38: manage node[‘gitlab’][‘manage-accounts’][‘enable’]
    39: end

    Compiled Resource:

    Declared in /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/recipes/web-server.rb:27:in `from_file’

    account(“Webserver user and group”) do
    action [:create]
    default_guard_interpreter :default
    declared_type :account
    cookbook_name “gitlab”
    recipe_name “web-server”
    username “gitlab-www”
    uid nil
    ugid “gitlab-www”
    groupname “gitlab-www”
    gid nil
    shell “/bin/false”
    home “/var/opt/gitlab/nginx”
    append_to_group true
    group_members [{“enable”=>false, “proxy_set_headers”=>{“Host”=>"$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}]
    manage_home false
    manage true
    end

    System Info:

    chef_version=13.6.4
    platform=redhat
    platform_version=7.4
    ruby=ruby 2.4.4p296 (2018-03-28 revision 63013) [x86_64-linux]
    program_name=/opt/gitlab/embedded/bin/chef-client
    executable=/opt/gitlab/embedded/bin/chef-client

Running handlers:
There was an error running gitlab-ctl reconfigure:

account[Webserver user and group] (gitlab::web-server line 27) had an error: Mixlib::ShellOut::ShellCommandFailed: group[Webserver user and group] (/opt/gitlab/embedded/cookbooks/cache/cookbooks/package/resources/account.rb line 38) had an error: Mixlib::ShellOut::ShellCommandFailed: Expected process to exit with [0], but received ‘3’
---- Begin output of [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] ----
STDOUT:
STDERR: gpasswd: user ‘{“enable”=>false, “proxy_set_headers”=>{“Host”=>"$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}’ does not exist
---- End output of [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] ----
Ran [“gpasswd”, “-a”, “{“enable”=>false, “proxy_set_headers”=>{“Host”=>”$http_host_with_default", “X-Real-IP”=>"$remote_addr", “X-Forwarded-For”=>"$proxy_add_x_forwarded_for", “Upgrade”=>"$http_upgrade", “Connection”=>"$connection_upgrade", “X-Forwarded-Proto”=>“http”}, “real_ip_trusted_addresses”=>, “listen_port”=>80}", “gitlab-www”] returned 3

Running handlers compllete
Chef Client failed. 0 resources updated in 16 seconds
[root@tower01 html]

I am not sure what I have done that is wrong. Please help.

2

You have got two typos there:

  • extrernal_users should probably be external_users
  • ngixn should probably be nginx
1 Like
3

ClassAug,

I have checked and those have have been fixed and it looks to be working now. Now my issues with is with Nginx to proxy it correctly.

Thanks you.