141 lines
2.9 KiB
Markdown
141 lines
2.9 KiB
Markdown
---
|
|
title: Gitea
|
|
visible: true
|
|
---
|
|
|
|
[toc]
|
|
|
|
## Pre-Setup
|
|
|
|
Create a gitea user
|
|
|
|
```sh
|
|
useradd -m git
|
|
mkdir /etc/gitea
|
|
chown git:git -R /etc/gitea
|
|
```
|
|
|
|
Create the .ssh directory for the git user
|
|
|
|
```sh
|
|
sudo -u git mkdir -p /home/git/.ssh
|
|
```
|
|
|
|
Get the user id of git with `id git`
|
|
|
|
## Podman
|
|
|
|
### Network and Pod
|
|
|
|
```sh
|
|
podman network create net_gitea
|
|
podman pod create --name pod_gitea --network net_gitea -p 127.0.0.1:5432:5432 -p 3000:3000 -p 127.0.0.1:2222:22
|
|
```
|
|
|
|
#### Port Mappings
|
|
|
|
```
|
|
5432 (localhost): Postgres Database
|
|
3000: Gitea WebUI
|
|
2222 (localhost): Gitea SSH
|
|
```
|
|
|
|
### Database
|
|
|
|
```sh
|
|
# podman run --name giteadb \
|
|
-e PGDATA=/var/lib/postgresql/data/pgdata \
|
|
-e POSTGRES_USER=gitea \
|
|
-e POSTGRES_PASSWORD=gitea \
|
|
-e POSTGRES_DB=gitea \
|
|
-v /mnt/postgres:/var/lib/postgresql/data \
|
|
--pod pod_gitea \
|
|
-d docker.io/postgres:14
|
|
```
|
|
|
|
### Application
|
|
|
|
```sh
|
|
# podman run --name gitea \
|
|
-e USER_UID=(uid) \
|
|
-e USER_GID=(gid) \
|
|
-e GITEA__database__DB_TYPE=postgres \
|
|
-e GITEA__database__HOST=giteadb:5432 \
|
|
-e GITEA__database__NAME=gitea \
|
|
-e GITEA__database__USER=gitea \
|
|
-e GITEA__database__PASSWD=gitea \
|
|
-v /mnt/gitea:/data \
|
|
-v /home/git/.ssh/:/data/git/.ssh \
|
|
-v /etc/timezone:/etc/timezone:ro \
|
|
-v /etc/localtime:/etc/localtime:ro \
|
|
--pod pod_gitea \
|
|
-d docker.io/gitea/gitea:latest
|
|
```
|
|
|
|
**NOTE:** gitea's /data directory must not contain permissions too open. Otherwise the SSH redirection set up below will fail.
|
|
`0750` for directories and `0640` is known to work.
|
|
|
|
The next few lines are used to set up ssh-redirection to gitea if it is used to clone a repo.
|
|
|
|
> See also the [official documentation](https://docs.gitea.io/en-us/install-with-docker/#sshing-shim-with-authorized_keys)
|
|
|
|
Create SSH Keys for gitea
|
|
|
|
```sh
|
|
sudo -u git ssh-keygen -t rsa -b 4096 -C "Gitea Host Key"
|
|
sudo -u git cat /home/git/.ssh/id_rsa.pub | sudo -u git tee -a /home/git/.ssh/authorized_keys
|
|
sudo -u git chmod 600 /home/git/.ssh/authorized_keys
|
|
|
|
cat <<"EOF" | sudo tee /usr/local/bin/gitea
|
|
#!/bin/sh
|
|
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
|
|
EOF
|
|
|
|
chmod +x /usr/local/bin/gitea
|
|
```
|
|
|
|
We've now finished setting up the ssh-redirection.
|
|
After that, connect to the Server on port 3000 to finish the installation
|
|
The first registered user will be made admin
|
|
|
|
## Management CLI
|
|
|
|
Gitea comes with a management cli. To access it, change into the Container first and su into the user "git".
|
|
|
|
```sh
|
|
podman exec -it gitea bash
|
|
su git
|
|
```
|
|
|
|
### User Management
|
|
|
|
List users:
|
|
|
|
```sh
|
|
gitea admin user list
|
|
```
|
|
|
|
Change user password:
|
|
|
|
```sh
|
|
gitea admin user change-password -u (user) -p (password)
|
|
```
|
|
|
|
## Package Management
|
|
|
|
### Container Registry
|
|
|
|
Gitea comes with a built-in container registry.
|
|
|
|
#### Login
|
|
|
|
```sh
|
|
podman login gitea.exu.li
|
|
```
|
|
|
|
#### Push image
|
|
|
|
```sh
|
|
podman push <IMAGE ID> docker://gitea.exu.li/<OWNER>/<IMAGE>:<TAG>
|
|
```
|