在 Windows 主机上使用 Docker 设置 Gitlab，共享文件夹问题

Question

TLDR；

有谁知道如何解决“断言“/var/opt/gitlab/git-data”的所有权是 git 失败”错误？

背景：

我想在 WindowsServer2012R2 上设置Gitlab Docker，运行 Docker 工具箱，版本 17.04.0-ce，构建 4845c56。

问题/疑问

我无法让共享文件夹在服务器的 D 盘上正常工作。我读到我需要将文件夹添加到 VirtualBox VM，这是通过 VB GUI 中的设置/共享文件夹菜单完成的。我为路径“D:\data\gitlab”设置了一个名称“gitlab”，然后检查了自动挂载，永久化，并将其设置为完全访问。

我启动了 docker 机器并运行了“docker-machine ssh $machine-name”。我注意到没有 /media 目录，所以我在主目录（/home/docker/gitlab）中添加了一个文件夹，然后使用我在几个论坛中找到的以下命令安装了共享文件夹：

sudo mount -t vboxsf gitlab /home/docker/gitlab

此时我可以将文件添加到 Windows 主机目录或 Docker 虚拟机，它似乎工作正常并且测试文件显示出来。

现在，当我启动 Gitlab Docker 映像时，我使用从他们的文档中修改的以下命令：

docker run --detach --hostname gitlab.example.com --publish 80:80 --name gitlab --volume /home/docker/gitlab:/etc/gitlab:Z --volume /home/docker/gitlab/logs:/var/log/gitlab:Z --volume /home/docker/gitlab/data:/var/opt/gitlab:Z gitlab/gitlab-ce

现在我知道它似乎正在写入共享驱动器，因为所有这些文件都已生成，但几秒钟后它崩溃并且我收到以下错误日志。

错误日志：

Thank you for using GitLab Docker Image!
Current version: gitlab-ce=9.3.6-ce.0

Configure GitLab for your system by editing /etc/gitlab/gitlab.rb file
And restart this container to reload settings.
To do it use docker exec:

  docker exec -it gitlab vim /etc/gitlab/gitlab.rb
  docker restart gitlab

For a comprehensive list of configuration options please see the Omnibus GitLab readme
https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/README.md

If this container fails to start due to permission problems try to fix it by executing:

  docker exec -it gitlab update-permissions
  docker restart gitlab

Installing gitlab.rb config...
Generating ssh_host_rsa_key...
Generating public/private rsa key pair.
Your identification has been saved in /etc/gitlab/ssh_host_rsa_key.
Your public key has been saved in /etc/gitlab/ssh_host_rsa_key.pub.
The key fingerprint is:
SHA256:GyFlf9tl7ZuEbuE+dwZUYiyahdsRzpC1T7kwyUvoD+o root@gitlab.example.com
The key's randomart image is:
+---[RSA 2048]----+
|        o .+oo   |
|       o .o*+o+.o|
|      . . o*@+oo+|
|       . o+o.Oo= |
|        S o o++..|
|         + oo + o|
|        o   .+ + |
|       .    o. .o|
|        E    .o..|
+----[SHA256]-----+
Generating ssh_host_ecdsa_key...
Generating public/private ecdsa key pair.
Your identification has been saved in /etc/gitlab/ssh_host_ecdsa_key.
Your public key has been saved in /etc/gitlab/ssh_host_ecdsa_key.pub.
The key fingerprint is:
SHA256:Kb99jG8EtMuTSdIuqBT3GLeD1D0wwTEcQhKgVJUlBjs root@gitlab.example.com
The key's randomart image is:
+---[ECDSA 256]---+
| .o+=*=+=+       |
|..  oo..=..      |
|.  E   . * .     |
|    o + +.B      |
|     +.BS* *     |
|    . +o= B .    |
|   . .  .o =     |
|    .    o. +    |
|        . .+.    |
+----[SHA256]-----+
Generating ssh_host_ed25519_key...
Generating public/private ed25519 key pair.
Your identification has been saved in /etc/gitlab/ssh_host_ed25519_key.
Your public key has been saved in /etc/gitlab/ssh_host_ed25519_key.pub.
The key fingerprint is:
SHA256:lVxpu0UoyNPWVY6D9c+m/bUTyvKP6vuR4cTOYwQ0j+U root@gitlab.example.com
The key's randomart image is:
+--[ED25519 256]--+
|       . o +.=o..|
|        +.=o@o.+ |
|         o+=.Eo o|
|         .  + .o.|
|        S    B  +|
|            B o= |
|            .Oo +|
|           ..o+.+|
|          .+*+.oo|
+----[SHA256]-----+
Preparing services...
Starting services...
Configuring GitLab package...
/opt/gitlab/embedded/bin/runsvdir-start: line 24: ulimit: pending signals: cannot modify limit: Operation not permitted
/opt/gitlab/embedded/bin/runsvdir-start: line 34: ulimit: max user processes: cannot modify limit: Operation not permitted
/opt/gitlab/embedded/bin/runsvdir-start: line 37: /proc/sys/fs/file-max: Read-only file system
Configuring GitLab...

================================================================================
Error executing action `run` on resource 'ruby_block[directory resource: /var/opt/gitlab/git-data]'
================================================================================

Mixlib::ShellOut::ShellCommandFailed
------------------------------------
Failed asserting that ownership of "/var/opt/gitlab/git-data" was git
---- Begin output of set -x && [ "$(stat --printf='%U' $(readlink -f /var/opt/gitlab/git-data))" = 'git' ] ----
STDOUT:
STDERR: + readlink -f /var/opt/gitlab/git-data
+ stat --printf=%U /var/opt/gitlab/git-data
+ [ UNKNOWN = git ]
---- End output of set -x && [ "$(stat --printf='%U' $(readlink -f /var/opt/gitlab/git-data))" = 'git' ] ----
Ran set -x && [ "$(stat --printf='%U' $(readlink -f /var/opt/gitlab/git-data))" = 'git' ] returned 1

Cookbook Trace:
---------------
/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/storage_directory_helper.rb:124:in `validate_command'
/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/storage_directory_helper.rb:112:in `block in validate'
/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/storage_directory_helper.rb:111:in `each_index'
/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/storage_directory_helper.rb:111:in `validate'
/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/libraries/storage_directory_helper.rb:87:in `validate!'
/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/definitions/storage_directory.rb:35:in `block (3 levels) in from_file'

Resource Declaration:
---------------------
# In /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/definitions/storage_directory.rb

 26:   ruby_block "directory resource: #{params[:path]}" do
 27:     block do
 28:       # Ensure the directory exists
 29:       storage_helper.ensure_directory_exists(params[:path])
 30:
 31:       # Ensure the permissions are set
 32:       storage_helper.ensure_permissions_set(params[:path])
 33:
 34:       # Error out if we have not achieved the target permissions
 35:       storage_helper.validate!(params[:path])
 36:     end
 37:     not_if { storage_helper.validate(params[:path]) }
 38:   end
 39: end

Compiled Resource:
------------------
# Declared in /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/definitions/storage_directory.rb:26:in `block in from_file'

ruby_block("directory resource: /var/opt/gitlab/git-data") do
  params {:path=>"/var/opt/gitlab/git-data", :owner=>"git", :group=>nil, :mode=>"0700", :name=>"/var/opt/gitlab/git-data"}
  action [:run]
  retries 0
  retry_delay 2
  default_guard_interpreter :default
  block_name "directory resource: /var/opt/gitlab/git-data"
  declared_type :ruby_block
  cookbook_name "gitlab"
  recipe_name "gitlab-shell"
  block #<Proc:0x000000054a99a8@/opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/definitions/storage_directory.rb:27>
  not_if { #code block }
end

Platform:
---------
x86_64-linux

有谁知道如何解决“断言“/var/opt/gitlab/git-data”的所有权是 git 失败”错误？我对 Docker/设置 Gitlab 还有些陌生，所以我很可能忽略了一些简单的事情。我花了几个小时在谷歌上搜索这个，似乎其他人在使用 Docker 工具箱从 Windows 上工作共享文件夹时也遇到了很多问题，所以希望这对其他人也有帮助。

Answer 1

背景

对于我们这些陷入没有本地 docker 的世界的人来说，一个解决方案（也许不是最好的）是使用 vdi 驱动器和共享文件夹。 vdi 驱动器可以存在于我们想要的驱动器上（如果您不想使用 C 驱动器，这很重要），并且用于允许 Gitlab docker 能够 chown 任何它想要的东西，所以这是我们将存储的地方持久卷。缺点是 vdi 不像简单的共享文件夹那样透明，因此对于备份，共享文件夹使事情变得更容易/透明。

免责声明

我不是这方面的专家，所以请谨慎行事，对我所说的话持保留态度。

执行步骤

在您想要的任何驱动器上创建一个新的 vdi 驱动器和共享文件夹

1. 关闭要用于 gitlab 的 docker 机器
2. 在 virtualbox 中进入 docker-machine 上的设置，然后是 Storage，然后点击 Add Hard Disk 图标，然后点击 Create new disk
3. 选择VDI（VirtualBox Disk Image）并点击下一步
4. 选择动态分配并点击下一步
5. 通过单击带有绿色胡萝卜符号的文件夹，选择要存储 vdi 的名称和位置，然后选择 vdi 可以增长到的最大大小，然后单击创建
6. 现在在设置菜单中，切换到共享文件夹并点击添加新的共享文件夹图标
7. 创建一个 gitlabbackups 文件夹到您想要的任何位置，然后选择 Auto-mount 和 Make Permanent

现在分区并格式化驱动器

1. 启动/进入 docker 机器（使用 VBox 窗口或在 cmd 提示符下docker-machine ssh <your docker machine name>）
2. 运行fdisk -l 列出可用驱动器，如果您只安装了一个额外的 vdi 驱动器，您应该会看到类似 /dev/sdb 的内容
3. 接下来的步骤是不可逆的，因此请自行决定：输入命令fdisk /dev/sdb，然后输入n 用于新分区，p 用于主分区，1
4. 现在格式化新分区（您可能还需要 sudo）：mkfs.ext4 /dev/sdb1

在第二个 vdi 上使用持久卷运行 docker，并在共享文件夹中备份

示例 Dockerfile：

FROM gitlab/gitlab-ce:latest

RUN apt-get update
RUN apt-get install -y cron

# Add a cron job to backup everyday
RUN echo "0 5 * * * /opt/gitlab/bin/gitlab-rake gitlab:backup:create STRATEGY=copy CRON=1" | crontab -
# For an unknown reason, the cron job won't actually run unless cron is restarted
CMD service cron restart && \
    /assets/wrapper

示例 docker-compose.yml：

version: "3.0"
services:
  gitlab:
    build: .
    restart: always
    ports:
      - "80:80"
    volumes:
      # These volumes are on the vdi we created above
      - "/mnt/sdb1/etc/gitlab/:/etc/gitlab"
      - "/mnt/sdb1/var/log/gitlab:/var/log/gitlab"
      - "/mnt/sdb1/var/opt/gitlab:/var/opt/gitlab"
      # This volume sits in the shared folder defined above
      - "/gitlabbackups:/var/opt/gitlab/backups"
    cap_add:
      # These seem to be necessary for the mounted drive to work properly
      # https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities
      - SYS_ADMIN
      - DAC_READ_SEARCH

因为自动挂载 vdi 似乎存在问题，例如使用启动脚本（假设您使用 D 驱动器，只需根据需要替换 <...> 内的任何内容），示例 run.bat:

@cd /d D:\<path to docker-compose.yml, assuming it's on the D drive>
@docker-machine start <docker machine name>
@FOR /f "tokens=*" %%i IN ('docker-machine env <docker machine name>') DO @%%i
@docker-machine ssh <docker machine name> sudo mount /dev/sdb1 /mnt/sdb1
@docker-compose build
@docker-compose up -d
@REM If the docker machine was completely off, running only 'docker-compose up -d' will 
@REM not mount the volumes properly. Stopping and restarting the container results in 
@REM the volumes mounting properly.
@docker stop <gitlab container name>
@docker start <gitlab container name>
@pause

注意：gitlab 容器名称可以通过运行docker-compose up 一次然后docker ps -a 来检查它，但它通常遵循约定<directory compose file is in>_<name in the compose file, e.g. gitlab here>_1

假设一切顺利并且您根据您的情况更改了上面 <...> 中的内容，您应该能够运行批处理文件并启动并运行 gitlab，以便将所有内容存储在备用驱动器、vdi 中的持久工作文件（以绕过 VBox POSIX 限制）以及透明地存储在共享文件夹中的备份。

希望这可以帮助其他无法访问本地 docker 的可怜人。