Centos 安装配置gerrit

2022-10-30 10:08:39

关闭selinux，不然nginx的反向代理会报错connect() to 127.0.0.1:8080 failed (13: Permission denied) while connecting to upstream，或者使用这个命令：

setsebool -P httpd_can_network_connect 1

关闭selinux：

修改/etc/selinux/config 文件

将SELINUX=enforcing改为SELINUX=disabled

reboot

首先安装jdk

yum install java java-devel，如果直接yum install java会自动找到相应的包的，我这里安装的是openjdk的1.7.0版本，目录可以自己看到。

配置java环境变量：

vim /etc/profile

export JAVA_HOME=/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.99-2.6.5.0.el7_2.x86_64

export JRE_HOME=$JAVA_HOME/jre

export CLASSPATH=$JAVA_HOME/lib:$JRE_HOME/lib:$CLASSPATH

export PATH=$JAVA_HOME/bin:$JRE_HOME/bin:$PATH

然后source /etc/profile

javac有输出说明安装成功

安装mysql，请看http://www.cnblogs.com/juandx/p/5208613.html

然后给gerrit建一个库，并且授权

mysql> create database gerritdb;

Query OK,  row affected (0.00 sec)

mysql> GRANT ALL PRIVILEGES ON gerritdb.* TO 'gerrituser'@'localhost' IDENTIFIED BY 'gerritpass';

Query OK,  rows affected (0.00 sec)

mysql> GRANT ALL PRIVILEGES ON gerritdb.* TO 'gerrituser'@'%' IDENTIFIED BY 'gerritpass';

下载gerrit的java包https://www.gerritcodereview.com/download/gerrit-2.12.2.war

然后安装就行啦，这里会提示你很多选择

[gerrit@gerrit ~]$ java -jar gerrit-2.12..war init -d review_site

Using secure store: com.google.gerrit.server.securestore.DefaultSecureStore

*** Gerrit Code Review 2.12.

*** 

*** Git Repositories

*** 

Location of Git repositories   [/home/gerrit/git]:          这里一定要写git放的目录，没有的话自己会创建的

*** SQL Database

*** 

Database server type           [mysql]:                     db这个不用说吧

Server hostname                [localhost]:

Server port                    [(mysql default)]:

Database name                  [gerritdb]:

Database username              [gerrituser]:

Change gerrituser's password   [y/N]? 

*** Index

*** 

Type                           [LUCENE/?]:                          默认就好，直接回车

The index must be rebuilt before starting Gerrit:

  java -jar gerrit.war reindex -d site_path

*** User Authentication

*** 

Authentication method          [HTTP/?]:                            一定要写http，不然就不是反向代理了，写development_become_any_account就随意登陆了

Get username from custom HTTP header [Y/n]? n                       一定要n，不然反向代理gerrit报错为缺少一个y的header

SSO logout URL                 :

Enable signed push support     [y/N]? n

*** Email Delivery

*** 

SMTP server hostname           [smtp..com]:                       25端口是163的smtp

SMTP server port               []:

SMTP encryption                [NONE/?]:

SMTP username                  [littlexiaowen@.com]:

Change littlexiaowen@.com's password [y/N]? 

*** Container Process

*** 

Run as                         [gerrit]:                              这是用户，root也可以

Java runtime                   [/usr/lib/jvm/java-1.7.-openjdk-1.7.0.99-2.6.5.0.el7_2.x86_64/jre]:

Upgrade review_site/bin/gerrit.war [Y/n]? y

Copying gerrit-2.12..war to review_site/bin/gerrit.war

*** SSH Daemon

*** 

Listen on address              [*]:

Listen on port                 []: 

*** HTTP Daemon

*** 

Behind reverse proxy           [Y/n]? y

Proxy uses SSL (https://)      [y/N]? n

Subdirectory on proxy server   [/]:

Listen on address              [127.0.0.1]:

Listen on port                 []:

Canonical URL                  [http://gerrit.wenbin.com]: 

*** Plugins

*** 

Installing plugins.

Install plugin singleusergroup version v2.12.2 [Y/n]? y

version v2.12.2 is already installed, overwrite it [Y/n]? y

Install plugin commit-message-length-validator version v2.12.2 [Y/n]? y

version v2.12.2 is already installed, overwrite it [Y/n]? y

Install plugin reviewnotes version v2.12.2 [Y/n]? y

version v2.12.2 is already installed, overwrite it [Y/n]? y

Install plugin replication version v2.12.2 [Y/n]? y

version v2.12.2 is already installed, overwrite it [Y/n]? y

Install plugin download-commands version v2.12.2 [Y/n]? y

version v2.12.2 is already installed, overwrite it [Y/n]? y

Initializing plugins.

No plugins found with init steps.

Initialized /home/gerrit/review_site

[gerrit@gerrit ~]$ vim review_site/etc/gerrit.config

[gerrit@gerrit ~]$ vim sshd_log ^C

[gerrit@gerrit ~]$ ./review_site/bin/gerrit.sh restart

Stopping Gerrit Code Review: OK

Starting Gerrit Code Review: OK

[gerrit@gerrit ~]$

没办法，报错了很多，遇到了很多问题，但是也知道了反向代理的原理，httpd和nginx的设置，知道了原来nginx这么好用，并发量还这么好，以后要多多了解，单线程解决并发速度更快，算法很好，错的越多学的越多吧,一定要多看log啊

/review_gerrit/etc/gerrit.conf

[gerrit]

        basePath = /home/gerrit/git

        canonicalWebUrl = http://gerrit.wenbin.com

[database]

        type = mysql

        hostname = localhost

        database = gerritdb

        username = gerrituser

[index]

        type = LUCENE

[auth]

        type = HTTP

[receive]

        enableSignedPush = false

[sendemail]

        smtpServer = smtp.163.com

        smtpServerPort = 25

        smtpUser = littlexiaowen@163.com
        from=CodeReview<littlexiaowen@163.com>       这行是自己加的，不然注册的时候会提示失败，这里不用写密码，密码是写在security里的另一个文件里

[container]

        user = gerrit

        javaHome = /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.99-2.6.5.0.el7_2.x86_64/jre

[sshd]

        listenAddress = *:29418

[httpd]

        listenUrl = proxy-http://127.0.0.1:8081/

[cache]

        directory = cache

看到网上有一种修改邮件发送方式的方法：ssh ha gerrit set-account --add-email user99@163.com user99，还没有试过　

先生存一个http的认证文件，创建admin用户

# htpasswd -c /passwords admin

然后会提示输入密码

安装nginx yum install nginx

/etc/nginx/nginx.conf

...
    # for more information.

    include /etc/nginx/conf.d/*.conf;

    server {

        listen       80;

        server_name  gerrit.wenbin.com;

        root         /usr/share/nginx/html;

        # Load configuration files for the default server block.

        include /etc/nginx/default.d/*.conf;

        location / {

          auth_basic              "Gerrit Code Review";

          auth_basic_user_file    /passwords;

          proxy_pass              http://127.0.0.1:8081;

          proxy_set_header        X-Forwarded-For $remote_addr;

          proxy_set_header        Host $host;

        }

        error_page 404 /404.html;

            location = /40x.html {

        }

        error_page 500 502 503 504 /50x.html;

            location = /50x.html {

        }

    }

systemctl restart nginx就可以了

如果使用apache，那么yum install httpd，更改配置文件

/etc/httpd/httpd.conf

# Defaults if commented: EnableMMAP On, EnableSendfile Off

#

#EnableMMAP off

EnableSendfile on

# Supplemental configuration

#

# Load config files in the "/etc/httpd/conf.d" directory, if any.

IncludeOptional conf.d/*.conf
#增加下面这些

<VirtualHost *:80>

    ProxyRequests Off

    ProxyVia Off

    ProxyPreserveHost On

    <Proxy *>

        Order deny,allow

        Allow from all

    </Proxy>

    <Location />

        AuthType Basic

        AuthName "Gerrit Code Review"

        Require valid-user

        AuthUserFile /passwords

    </Location>

    ProxyPass / http://127.0.0.1:8081/

</VirtualHost>

systemctl resatrt httpd

如果nginx报错不能连接到8081端口，可能是selinux没有关

设置开机启动

sudo cp etc/gerrit.config /etc/init.d/gerrit

sudo ln -snf /etc/init.d/gerrit /etc/rc2.d/S90gerrit

sudo ln -snf /etc/init.d/gerrit /etc/rc3.d/S90gerrit

这样就安装成功了，哎。。。遇到的问题是gerrit repository not found: All-Projects，这样是发现没有在第二个回答中写git目录，如果再次出现这个错误，那就先在mysql中drop再create一遍db就好了。。。

在/review_gerrit/bin/gerrit.sh中实际代码第一行加入

GERRIT_SITE=/home/gerrit/review_site

执行/home/gerrit/review_site/bin/gerrit.sh就可以启动gerrit了

这样在浏览器中访问域名或者ip地址就ok了，输入admin的用户名和密码就可以看到界面了。

会提示注册邮箱，自己注册个就行了，

在右上角点击用户，选setting设置ssh-key

在主机上执行 ssh-keygen -C ***@163.com

把公钥放进页面的sshkey

这样就可以了，下面就需要把gitlab，gerrit，jenkins配置起来

码农公寓

相关文章