gitlab - 注册表选项卡不起作用

Question

我已在 AWS 服务器上安装了 gitlab，并且它按预期工作。

http://ec2-54-167-34-63.compute-1.amazonaws.com/

但是当我单击“注册表”选项卡时，显示页面未找到错误 (500)

<小时/>

相关部分来自/etc/gitlab/gitlab.rb

gitlab_rails['gitlab_default_projects_features_container_registry'] = true

# registry_external_url 'https://registry.gitlab.example.com'
registry_external_url 'http://ec2-54-167-34-63.compute-1.amazonaws.com:4567'

# Settings used by GitLab application
gitlab_rails['registry_enabled'] = true
gitlab_rails['registry_host'] = "http://ec2-54-167-34-63.compute-1.amazonaws.com"
gitlab_rails['registry_port'] = "5005"
gitlab_rails['registry_api_url'] = "http://localhost:5000"
gitlab_rails['registry_key_path'] = "/var/opt/gitlab/gitlab-rails/certificate.key"
gitlab_rails['registry_path'] = "/var/opt/gitlab/gitlab-rails/shared/registry"
gitlab_rails['registry_issuer'] = "omnibus-gitlab-issuer"

# Settings used by Registry application
registry['enable'] = true
registry['username'] = "registry"
registry['group'] = "registry"
registry['uid'] = nil
registry['gid'] = nil
registry['dir'] = "/var/opt/gitlab/registry"
registry['log_directory'] = "/var/log/gitlab/registry"
registry['log_level'] = "info"
registry['rootcertbundle'] = "/var/opt/gitlab/registry/certificate.crt"
registry['storage_delete_enabled'] = true

<小时/>

更新

根据下面的日志，我需要位于正确位置的 gitlab-registry.key 文件。这个文件是什么以及如何生成一个文件？

尾部/var/log/gitlab/gitlab-rails/product.log

Started GET "/root/test/container_registry" for 125.99.49.46 at 2016-10-24 08:29:27 +0000
Processing by Projects::ContainerRegistryController#index as HTML
  Parameters: {"namespace_id"=>"root", "project_id"=>"test"}
Completed 500 Internal Server Error in 23ms (ActiveRecord: 3.5ms)

Errno::ENOENT (No such file or directory @ rb_sysopen - /var/opt/gitlab/gitlab-rails/etc/gitlab-registry.key):
  lib/json_web_token/rsa_token.rb:20:in `read'
  lib/json_web_token/rsa_token.rb:20:in `key_data'
  lib/json_web_token/rsa_token.rb:24:in `key'
  lib/json_web_token/rsa_token.rb:28:in `public_key'
  lib/json_web_token/rsa_token.rb:33:in `kid'
  lib/json_web_token/rsa_token.rb:12:in `encoded'
  app/services/auth/container_registry_authentication_service.rb:30:in `full_access_token'
  app/models/project.rb:421:in `container_registry_repository'
  app/controllers/projects/container_registry_controller.rb:28:in `container_registry_repository'
  app/controllers/projects/container_registry_controller.rb:8:in `index'
  lib/gitlab/request_profiler/middleware.rb:15:in `call'
  lib/gitlab/middleware/go.rb:16:in `call'

<小时/>

更新2

我想我需要按照此处的说明生成证书...

http://www.bonusbits.com/wiki/HowTo:Setup_HTTPS_for_Gitlab

Answer 1

检查 GitLab 服务器日志(因为它是错误 500。此类日志的示例: issue 23019 )

GitLab 8.13 存在一个悬而未决的问题:23575: No way to enable container registry ，带有合并请求 7037: Fix typo in project settings that prevents users from enabling container registry .
它们可能与您的问题有关。

Issue 23339还提到“解决自签名证书问题(我的注册表与 gitlab 本身位于不同的域下)”:这里不应该是这种情况。

Issue 23181 (推送到注册表仍然经常遇到 未经授权:需要身份验证)表明该错误在 docker 1.11+ 中消失了(因此这取决于您在 AWS 上使用的 docker 版本)

<小时/>

关于OP编辑提到的gitlab-registry.key，如果声明正确，它应该通过简单的重新配置创建。

所以请仔细检查:

• 1316

It turns out it was a typo on my part.
The config key is registry_nginx["ssl_certificate"] not registry_nginx[ssl_certificate].

• 1218和 merge request 3787其中显示了如何添加此功能。