GitLab

Registry Cleanup

The docker registry does not remove deleted images. Like a bad memory leak, the registry will grow as old images are still stored even when dereferenced and deleted.

Use the docker-distribution-pruner utility which can be obtained from their project CI / CD page:

• https://gitlab.com/gitlab-org/docker-distribution-pruner/-/jobs

On the GitLab instance, run the following:

## This will soft-delete the files to /var/opt/gitlab/gitlab-rails/shared/registry/docker-backup
# EXPERIMENTAL=true ./docker-distribution-pruner -config=/var/opt/gitlab/registry/config.yml -delete
INFO[0000] Walking REPOSITORIES...
INFO[0000] REPOSITORIES DIR: repositories
INFO[0000] Walking BLOBS...
...
INFO[0001] BLOBS INFO: Objects/Unused: 296 / 75 Data/Unused: 3.0 GB / 398 MB
WARN[0001] DELETEABLE INFO: 115 links, 75 blobs, 0 other, 398 MB

## Remove the files
# rm -rf /var/opt/gitlab/gitlab-rails/shared/registry/docker-backup

Docker Registry Runners

• https://angristan.xyz/build-push-docker-images-gitlab-ci/

# docker-compose run --rm gitlab-runner register -n --url https://git.steamr.com/ --registration-token z276ujRTK69qD8xb-aNH --executor docker --docker-image "docker:stable"
Runtime platform                                    arch=amd64 os=linux pid=7 revision=3afdaba6 version=11.5.0
Running in system-mode.

Registering runner... succeeded                     runner=z276ujRT
Runner registered successfully. Feel free to start it, but if it's running already the config should be automatically reloaded!

root@docker:/root/docker/running/gitlab# cat /var/volumes/gitlab/runner-config/config.toml
concurrent = 1
check_interval = 0

[session_server]
  session_timeout = 1800

[[runners]]
  name = "3b70de49f826"
  url = "https://git.steamr.com/"
  token = "1dbe4535e5aaa49d6582d374a29c28"
  executor = "docker"
  [runners.docker]
    tls_verify = false
    image = "docker:stable"
    privileged = false
    disable_entrypoint_overwrite = false
    oom_kill_disable = false
    disable_cache = false
    volumes = ["/cache"]
    shm_size = 0
  [runners.cache]
    [runners.cache.s3]
    [runners.cache.gcs]


root@docker:/root/docker/running/gitlab# cat docker-compose.yml /root/docker/running/gitla
version: '3.3'

services:

  gitlab:
    #build:
    #  context: ./gogs
    #  dockerfile: Dockerfile
    # letsencrypt['enable'] = false
    image: gitlab/gitlab-ce:latest
    container_name: gitlab
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'https://git.steamr.com'
        nginx['listen_port'] = '80'
        nginx['listen_https'] = false
        nginx['proxy_set_headers'] = { 'X-Forwarded-Proto' => 'https', 'X-Forwarded-Ssl' => 'on' }
        registry_external_url 'https://registry.steamr.com'
        registry['enable'] = true
        gitlab_rails['registry_enabled'] = true
        registry_nginx['listen_port'] = 5001
        registry_nginx['listen_https'] = false
        registry_nginx['proxy_set_headers'] = { 'X-Forwarded-Proto' => 'https', 'X-Forwarded-Ssl' => 'on' }
    volumes:
      - /var/volumes/gitlab/config:/etc/gitlab
      - /var/volumes/gitlab/logs:/var/log/gitlab
      - /var/volumes/gitlab/data:/var/opt/gitlab
    restart: always
    expose:
      - "80"
      - "5001"
    ports:
      - "10.1.2.54:22:22"
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=traefik"
      - "traefik.web.port=80"
      - "traefik.web.frontend.rule=Host:git.steamr.com"
      - "traefik.registry.port=5001"
      - "traefik.registry.frontend.rule=Host:registry.steamr.com"
    networks:
      - traefik
    healthcheck:
      disable: true


  gitlab-runner:
    image: gitlab/gitlab-runner:latest
    container_name: gitlab-runner
    restart: always
    volumes:
      - /var/volumes/gitlab/runner-config:/etc/gitlab-runner
      - /var/run/docker.sock:/run/docker.sock


networks:
  traefik:
    external:
      name: traefik