1
# 替换eternal_url为域名（非标端口，443端口未开放的情况）
2
sudo sed -i "s|# external_url 'GENERATED_EXTERNAL_URL'|external_url 'https://example.com:4433'|" config/gitlab.rb
3
sudo sed -i "s|# letsencrypt\['enable'\] = nil|letsencrypt['enable'] = false|" config/gitlab.rb
4
sudo sed -i "s|# nginx\['listen_port'\] = nil|nginx\['listen_port'\] = 80|" config/gitlab.rb
5
sudo sed -i "s|# nginx\['listen_https'\] = nil|nginx\['listen_https'\] = false|" config/gitlab.rb
6
sudo docker compose up -d --force-recreate && sudo docker compose exec -it gitlab grep 'Password:' /etc/gitlab/initial_root_password

注

1. external_url 为http时，默认监听80。如果需要使用非标端口，例192.168.1.67:8008，那么docker-compose.yaml里端口映射改为65007:8008
2. 如果为https，经过测试，默认只能是443，例如上面指定4433端口但实际还是监听443。同时当为https时，没有提供有效的证书它甚至会去申请Let’s Encrypt的证书，这一定是会失败的（因为根本没配置acme）。此时就需要修改nginx['listen_port']为80，同时关闭https监听（因为我们要自己使用nginx反代）（相当于只保留了http服务）

1. 先创建一个license.rb 。mkdir crack && cd crack && nano license.rb

   1
   require "openssl"
   2
   require "gitlab/license"
   3
   
   4
   key_pair = OpenSSL::PKey::RSA.generate(2048)
   5
   File.open("license_key", "w") { |f| f.write(key_pair.to_pem) }
   6
   
   7
   public_key = key_pair.public_key
   8
   File.open("license_key.pub", "w") { |f| f.write(public_key.to_pem) }
   9
   
   10
   private_key = OpenSSL::PKey::RSA.new File.read("license_key")
   11
   Gitlab::License.encryption_key = private_key
   12
   
   13
   license = Gitlab::License.new
   14
   license.licensee = {
   15
     "Name" => "修改为你想叫的名字",
   16
     "Company" => "修改为你想叫的名字",
   17
     "Email" => "修改为你想要的邮箱@example.com",
   18
   }
   19
   license.starts_at = Date.new(2024, 1, 1) # 开始时间
   20
   license.expires_at = Date.new(2050, 12, 31) # 结束时间
   21
   license.notify_admins_at = Date.new(2049, 12, 31)
   22
   license.notify_users_at = Date.new(2049, 12, 31)
   23
   license.block_changes_at = Date.new(2050, 12, 1)
   24
   license.restrictions = {
   25
     active_user_count: 100000,
   26
     plan: "ultimate",
   27
     id: 1,
   28
     subscription_id: 1,
   29
   }
   30
   
   31
   puts "License:"
   32
   puts license
   33
   
   34
   data = license.export
   35
   puts "Exported license:"
   36
   puts data
   37
   File.open("GitLabBV.gitlab-license", "w") { |f| f.write(data) }
   38
   
   39
   public_key = OpenSSL::PKey::RSA.new File.read("license_key.pub")
   40
   Gitlab::License.encryption_key = public_key
   41
   
   42
   data = File.read("GitLabBV.gitlab-license")
   43
   $license = Gitlab::License.import(data)
   44
   
   45
   puts "Imported license:"
   46
   puts $license
   47
   
   48
   unless $license
   49
     raise "The license is invalid."
   50
   end
   51
   
   52
   if $license.restricted?(:active_user_count)
   53
     active_user_count = 10000
   54
     if active_user_count > $license.restrictions[:active_user_count]
   55
       raise "The active user count exceeds the allowed amount!"
   56
     end
   57
   end
   58
   
   59
   if $license.notify_admins?
   60
     puts "The license is due to expire on #{$license.expires_at}."
   61
   end
   62
   
   63
   if $license.notify_users?
   64
     puts "The license is due to expire on #{$license.expires_at}."
   65
   end
   66
   
   67
   module Gitlab
   68
     class GitAccess
   69
       def check(cmd, changes = nil)
   70
         if $license.block_changes?
   71
           return build_status_object(false, "License expired")
   72
         end
   73
       end
   74
     end
   75
   end
   76
   
   77
   puts "This instance of GitLab Enterprise Edition is licensed to:"
   78
   $license.licensee.each do |key, value|
   79
     puts "#{key}: #{value}"
   80
   end
   81
   
   82
   if $license.expired?
   83
     puts "The license expired on #{$license.expires_at}"
   84
   elsif $license.will_expire?
   85
     puts "The license will expire on #{$license.expires_at}"
   86
   else
   87
     puts "The license will never expire."
   88
   end
   

2. 运行ruby镜像生成证书。sudo docker run -it --rm -v ./crack:/crack ruby:latest bash。会进入到容器内的bash界面，输入以下指令：

   1
   cd /crack && gem install gitlab-license && ruby license.rb
   

   1. 会额外生成三个文件GitLabBV.gitlab-license, license_key, license_key.pub。
   2. 退出容器，进入crack文件夹，把license_key.pub拷贝到容器内。

      1
      sudo docker compose cp license_key.pub gitlab:/opt/gitlab/embedded/service/gitlab-rails/.license_encryption_key.pub
      

3. 按图片操作。cat crack/GitLabBV.gitlab-license。