gitlab-runner

ماذا يفعل

طريقة الكتابة

gitlab-runner COMMAND [OPTIONS]

الأجزاء الرئيسية

Commands

register

Connect the runner to GitLab.

list

Show registered runners.

verify [--delete]

Check runners (remove dead ones).

run

Run in the foreground.

start / stop / restart / status

Control the service.

unregister --name NAME / --all-runners

Remove a runner.

exec docker JOB

Run a job locally (old, limited).

الأكثر استخدامًا

لا يوجد شيء يطابق هذا الفلتر.

$ مستخدم عادي# بصلاحية root (أو مع sudo)

1. 1Install on RHEL

   #curl -L "https://packages.gitlab.com/install/repositories/runner/gitlab-runner/script.rpm.sh" | bash
   #dnf install -y gitlab-runner
   #systemctl enable --now gitlab-runner

2. 2Register a Docker runner

   #gitlab-runner register --non-interactive --url https://gitlab.com --token glrt-xxxxxxxxxxxx --executor docker --docker-image alpine:3.20 --description lab-docker
   #gitlab-runner list

3. 3A simple pipeline

   $cat .gitlab-ci.yml
   stages: [test, build, deploy]
   test:
     stage: test
     image: python:3.12-slim
     script:
       - pip install -r requirements.txt
       - pytest -q
   build:
     stage: build
     image: docker:27
     services: [docker:27-dind]
     script:
       - docker build -t $CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA .
       - docker push $CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA

4. 4Add security scans from GitLab templates

   $cat .gitlab-ci.yml
   include:
     - template: Jobs/SAST.gitlab-ci.yml
     - template: Jobs/Secret-Detection.gitlab-ci.yml
     - template: Jobs/Container-Scanning.gitlab-ci.yml

5. 5Deploy only from main with a protected environment

   $cat .gitlab-ci.yml
   deploy:
     stage: deploy
     environment: production
     rules:
       - if: $CI_COMMIT_BRANCH == "main"
     script:
       - kubectl apply -k deploy/overlays/prod

6. 6Read the runner config

   #cat /etc/gitlab-runner/config.toml
   concurrent = 4
   [[runners]]
     name = "lab-docker"
     executor = "docker"
     [runners.docker]
       image = "alpine:3.20"
       privileged = false

7. 7Check and fix runners

   #gitlab-runner verify
   #gitlab-runner status
   #journalctl -u gitlab-runner -f

8. 8Run the runner on Kubernetes with Helm

   $helm repo add gitlab https://charts.gitlab.io
   $helm install runner gitlab/gitlab-runner -n gitlab-runner --create-namespace --set gitlabUrl=https://gitlab.com --set runnerToken=glrt-xxxxxxxxxxxx

9. 9Remove a runner

   #gitlab-runner unregister --name lab-docker

10. 10Build images without privileged mode (kaniko)

    $cat .gitlab-ci.yml
    build:
      image: { name: gcr.io/kaniko-project/executor:v1.23.2-debug, entrypoint: [""] }
      script:
        - /kaniko/executor --context $CI_PROJECT_DIR --destination $CI_REGISTRY_IMAGE:$CI_COMMIT_SHORT_SHA

لا يوجد شيء يطابق هذا الفلتر.

الملفات

/etc/gitlab-runner/config.toml

Runner configuration (contains tokens, rights 600).

.gitlab-ci.yml

The pipeline in the repository.

رموز الخروج