Gitlab on CTRL-Find

Gitlab locked login backdoor

Wed, 01 Jan 2025 00:00:00 +0000

When locked out of the Gitlab environment, you’ll need to enable default sign-in method when OIDC or AD is configured. This could be done from within the UI, but if you are locked out then this method will ofcourse not work.

Enabling sign-in can also be done from the command line. SSH into the Gitlab server and perform the following command to enable sign-in.

start rails console (takes a while)

`1`	`gitlab-rails console`

Enable

`1`	`Gitlab::CurrentSettings.update!(password_authentication_enabled_for_web: true)`

Disable

`1`	`Gitlab::CurrentSettings.update!(password_authentication_enabled_for_web: false)`

How to configure Gitlab Advanced Search

Wed, 01 Jan 2025 00:00:00 +0000

Docker-compose elastic setup

This guide is based on docker-compose setup from elasticsearch. https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html

Add the Elastic IP

Add the IP and DNS from docker host to Gitlab.

`1`	`vi /etc/hosts`

`1`	`<self specific ip> < DNS name like: test0.internal test1.internal test2.internal>`

Add Elastic CA certificate

Add the CA certificate to /etc/gitlab/trusted-certs (give it a logical name) This CA file can be found on the docker host in the mapped data location.

How to do a Gitlab Major version upgrade

Wed, 01 Jan 2025 00:00:00 +0000

Upgrade Path

You can check the upgrade path on the following site: https://gitlab-com.gitlab.io/support/toolbox/upgrade-path/. This website is made by Gitlab, and will give a good overview about changes and new features for the upgrades you selected.

Checks

https://docs.gitlab.com/ee/update/index.html#checking-for-background-migrations-before-upgrading Check pending and failed DB migrations.

1
2

gitlab-rails runner -e production 'puts Gitlab::Database::BackgroundMigration::BatchedMigration.queued.count'
gitlab-rails runner -e production 'puts Gitlab::Database::BackgroundMigration::BatchedMigration.with_status(:failed).count'

OPTIONAL: Check pending elasticsearch migrations

`1`	`gitlab-rake gitlab:elastic:list_pending_migrations`

Update check

How to reindex Gitlab Advanced_search

Wed, 01 Jan 2025 00:00:00 +0000

Advanced Search page Gitlab

Go to the Admin page in Gitlab > Settings > Advanced Search Expand Advanced Search to see the configuration.

Disabling feature

Go to the Advanced search page in Gitlab De-select the following options;

Elasticsearch indexing
Search with Elasticsearch enabled

Recreate indices

Login and connect to the gitlab instance. We can remove the current indices and recreate them as new with following command;

`1`	`gitlab-rake gitlab:elastic:recreate_index`

Enabling indexing

Go to the Advanced search page in Gitlab. We enable the Elasticsearch indexing option and Press “Index all projects” button. In the background ElasticSearch will be populated with information The state can be found with following command;