docker - gitlab docker 登录失败 : certificate signed by unknown authority

Question

当我尝试登录到我的注册表时，我收到了“由未知权威签署的 x509 证书”

我在带有 ssl 的反向代理后面有一个 dockerized gitlab(证书在我的主机上)

services:
  gitlab:
    image: 'gitlab/gitlab-ce:latest'
    restart: always
    hostname: 'gitlab.example.com'
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'https://gitlab.mydomain.com'
        registry_external_url 'https://gitlab.mydomain.com:5555'
        registry_nginx['enable'] = true
        registry_nginx['listen_port'] = 5555
        registry_nginx['ssl_certificate'] = "/etc/gitlab/ssl/gitlab.mydomain.com.pem"
        registry_nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/gitlab.mydomain.com.key"
        gitlab_rails['gitlab_shell_ssh_port'] = 2222
        nginx['listen_port'] = 80
        nginx['listen_https'] = false
    ports:
      - '8088:80'
      - '2222:22'
      - '5555:5555'
    volumes:
      - './config:/etc/gitlab'
      - './logs:/var/log/gitlab'
      - './data:/var/opt/gitlab'

您遇到过这样的问题吗？

Answer 1

我找到了答案，所以如果有人遇到同样的问题，它可能会有所帮助。

因此，将 letsencrypt 证书复制并粘贴到一个目录中(此处为 ./ssl)，并将其用作 docker-compose.yml 中的卷。重新启动你的容器，一切都会好起来的。

(每次使用 cron 重新生成证书时一定要这样做)

services:
  gitlab:
    image: 'gitlab/gitlab-ce:latest'
    restart: always
    hostname: 'gitlab.example.com'
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'https://gitlab.mydomain.com'
        registry_external_url 'https://gitlab.mydomain.com:5555'
        registry_nginx['enable'] = true
        registry_nginx['listen_port'] = 5555
        registry_nginx['ssl_certificate'] = "/etc/gitlab/ssl/gitlab.mydomain.com.pem"
        registry_nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/gitlab.mydomain.com.key"
        gitlab_rails['gitlab_shell_ssh_port'] = 2222
        nginx['listen_port'] = 80
        nginx['listen_https'] = false
    ports:
      - '8088:80'
      - '2222:22'
      - '5555:5555'
    volumes:
      - './config:/etc/gitlab'
      - './logs:/var/log/gitlab'
      - './data:/var/opt/gitlab'
      - './ssl:/etc/gitlab/ssl/'