nixpkgs/pkgs/applications/version-management/gitlab/default.nix

116 lines
3.8 KiB
Nix
Raw Normal View History

2018-09-21 09:37:51 +02:00
{ stdenv, lib, fetchurl, fetchFromGitLab, bundlerEnv
2018-09-25 02:32:02 +02:00
, ruby, tzdata, git, procps, nettools
, gitlabEnterprise ? false
2015-01-25 22:01:48 +01:00
}:
let
2017-09-03 15:38:28 +02:00
rubyEnv = bundlerEnv {
name = "gitlab-env-${version}";
2015-01-25 22:01:48 +01:00
inherit ruby;
gemdir = ./rubyEnv- + "${if gitlabEnterprise then "ee" else "ce"}";
2018-04-25 19:57:10 +02:00
groups = [ "default" "unicorn" "ed25519" "metrics" ];
2015-01-25 22:01:48 +01:00
};
flavour = if gitlabEnterprise then "ee" else "ce";
data = (builtins.fromJSON (builtins.readFile ./data.json)).${flavour};
2017-09-03 15:38:28 +02:00
version = data.version;
sources = {
2018-09-21 09:40:08 +02:00
gitlab = fetchFromGitLab {
owner = data.owner;
repo = data.repo;
rev = data.rev;
sha256 = data.repo_hash;
2018-09-21 09:40:08 +02:00
};
gitlabDeb = fetchurl {
url = data.deb_url;
sha256 = data.deb_hash;
2018-09-21 09:40:08 +02:00
};
2017-09-03 15:38:28 +02:00
};
2015-01-25 22:01:48 +01:00
in
2015-01-25 22:01:48 +01:00
stdenv.mkDerivation rec {
2018-09-21 09:40:08 +02:00
name = "gitlab${if gitlabEnterprise then "-ee" else ""}-${version}";
2018-09-21 09:40:08 +02:00
src = sources.gitlab;
2015-10-21 19:48:56 +02:00
2018-01-07 04:59:27 +01:00
buildInputs = [
2018-04-25 19:57:10 +02:00
rubyEnv rubyEnv.wrappedRuby rubyEnv.bundler tzdata git procps nettools
2018-01-07 04:59:27 +01:00
];
2018-09-21 09:37:51 +02:00
patches = [ ./remove-hardcoded-locations.patch ];
postPatch = ''
2015-01-25 22:01:48 +01:00
# For reasons I don't understand "bundle exec" ignores the
# RAILS_ENV causing tests to be executed that fail because we're
# not installing development and test gems above. Deleting the
# tests works though.:
rm lib/tasks/test.rake
2015-10-21 19:48:56 +02:00
rm config/initializers/gitlab_shell_secret_token.rb
substituteInPlace app/controllers/admin/background_jobs_controller.rb \
2018-04-25 19:57:10 +02:00
--replace "ps -U" "${procps}/bin/ps -U"
2018-03-22 02:08:49 +01:00
sed -i '/ask_to_continue/d' lib/tasks/gitlab/two_factor.rake
2018-11-02 21:22:51 +01:00
sed -ri -e '/log_level/a config.logger = Logger.new(STDERR)' config/environments/production.rb
2015-01-25 22:01:48 +01:00
'';
2015-01-25 22:01:48 +01:00
buildPhase = ''
mv config/gitlab.yml.example config/gitlab.yml
2018-09-21 09:37:51 +02:00
# Building this requires yarn, node &c, so we just get it from the deb
2018-09-21 09:40:08 +02:00
ar p ${sources.gitlabDeb} data.tar.gz | gunzip > gitlab-deb-data.tar
2018-09-21 09:37:51 +02:00
# Work around unpacking deb containing binary with suid bit
2018-01-07 04:59:27 +01:00
tar -f gitlab-deb-data.tar --delete ./opt/gitlab/embedded/bin/ksu
tar -xf gitlab-deb-data.tar
2017-09-03 15:38:28 +02:00
mv -v opt/gitlab/embedded/service/gitlab-rails/public/assets public
2018-09-21 09:37:51 +02:00
rm -rf opt # only directory in data.tar.gz
mv config/gitlab.yml config/gitlab.yml.example
2017-09-03 15:38:28 +02:00
rm -f config/secrets.yml
mv config config.dist
'';
2015-01-25 22:01:48 +01:00
installPhase = ''
rm -r tmp
2015-01-25 22:01:48 +01:00
mkdir -p $out/share
cp -r . $out/share/gitlab
2017-09-03 15:38:28 +02:00
rm -rf $out/share/gitlab/log
ln -sf /run/gitlab/log $out/share/gitlab/log
ln -sf /run/gitlab/uploads $out/share/gitlab/public/uploads
ln -sf /run/gitlab/config $out/share/gitlab/config
ln -sf /run/gitlab/tmp $out/share/gitlab/tmp
# rake tasks to mitigate CVE-2017-0882
# see https://about.gitlab.com/2017/03/20/gitlab-8-dot-17-dot-4-security-release/
cp ${./reset_token.rake} $out/share/gitlab/lib/tasks/reset_token.rake
2015-01-25 22:01:48 +01:00
'';
2015-01-25 22:01:48 +01:00
passthru = {
2017-09-03 15:38:28 +02:00
inherit rubyEnv;
2018-04-25 19:57:10 +02:00
ruby = rubyEnv.wrappedRuby;
GITALY_SERVER_VERSION = data.passthru.GITALY_SERVER_VERSION;
GITLAB_PAGES_VERSION = data.passthru.GITLAB_PAGES_VERSION;
GITLAB_SHELL_VERSION = data.passthru.GITLAB_SHELL_VERSION;
GITLAB_WORKHORSE_VERSION = data.passthru.GITLAB_WORKHORSE_VERSION;
};
2018-08-20 20:08:12 +02:00
2018-09-21 09:37:51 +02:00
meta = with lib; {
homepage = http://www.gitlab.com/;
platforms = platforms.linux;
maintainers = with maintainers; [ fpletz globin krav ];
2018-09-21 09:40:08 +02:00
} // (if gitlabEnterprise then
{
license = licenses.unfreeRedistributable; # https://gitlab.com/gitlab-org/gitlab-ee/raw/master/LICENSE
description = "GitLab Enterprise Edition";
}
else
{
license = licenses.mit;
description = "GitLab Community Edition";
longDescription = "GitLab Community Edition (CE) is an open source end-to-end software development platform with built-in version control, issue tracking, code review, CI/CD, and more. Self-host GitLab CE on your own servers, in a container, or on a cloud provider.";
});
}