Question

我正在CentOS 7（minimal）上安装gitlab-ce（8.17.2）。基本安装后，sudo gitlab-ctl reconfigure给了我这个错误：

在资源'execute [semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp]上执行操作run时出错

详细信息（到目前为止我做了什么）：

我首先安装/执行了以下依赖项：

yum check-update
sudo yum install curl policycoreutils openssh-server openssh-clients
sudo systemctl enable sshd
sudo systemctl start sshd
sudo yum install postfix
sudo systemctl enable postfix
sudo systemctl start postfix
sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https
sudo systemctl reload firewalld

然后我使用以下命令安装了gitlab（omnibus）：

curl -sS https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash
sudo yum install gitlab-ce

安装了最新的8.17.2版本。

我还没有自定义/etc/gitlab/gitlab.rb。当我尝试使用：

重新配置gitlab时

sudo gitlab-ctl reconfigure

我收到以下错误：

Recipe: gitlab::selinux
  * execute[semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp] action runsemodule: relocation error: semodule: symbol semanage_module_info_get_version, version LIBSEMANAGE_1.1 not defined in file libsemanage.so.1 with link time reference

    [execute] semodule: relocation error: semodule: symbol semanage_module_info_get_version, version LIBSEMANAGE_1.1 not defined in file libsemanage.so.1 with link time reference

    ================================================================================
    Error executing action `run` on resource 'execute[semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp]'
    ================================================================================

    Mixlib::ShellOut::ShellCommandFailed
    ------------------------------------
    Expected process to exit with [0], but received '127'
    ---- Begin output of semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp ----
    STDOUT:
    STDERR: semodule: relocation error: semodule: symbol semanage_module_info_get_version, version LIBSEMANAGE_1.1 not defined in file libsemanage.so.1 with link time reference
    ---- End output of semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp ----
    Ran semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp returned 127

    Resource Declaration:
    ---------------------
    # In /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/recipes/selinux.rb

     20:   execute "semodule -i /opt/gitlab/embedded/selinux/rhel/7/#{ssh_keygen_module}.pp" do
     21:     not_if "getenforce | grep Disabled"
     22:     not_if "semodule -l | grep '^#{ssh_keygen_module}\\s'"
     23:   end
     24: end

    Compiled Resource:
    ------------------
    # Declared in /opt/gitlab/embedded/cookbooks/cache/cookbooks/gitlab/recipes/selinux.rb:20:in `from_file'

    execute("semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp") do
      action [:run]
      retries 0
      retry_delay 2
      default_guard_interpreter :execute
      command "semodule -i /opt/gitlab/embedded/selinux/rhel/7/gitlab-7.2.0-ssh-keygen.pp"
      backup 5
      returns 0
      declared_type :execute
      cookbook_name "gitlab"
      recipe_name "selinux"
      not_if "getenforce | grep Disabled"
      not_if "semodule -l | grep '^gitlab-7.2.0-ssh-keygen\s'"
    end

    Platform:
    ---------
    x86_64-linux


Running handlers:
Running handlers complete
Chef Client failed. 3 resources updated in 03 seconds

请注意，在以下文件中： /etc/sysconfig/selinux 如果我将SELINUX =强制更改为禁用并尝试重新配置，它可以正常工作。但我希望它能在不这样做的情况下发挥作用。几周前它的版本为gitlab 8.16.0就好了。现在，即使我安装8.0.16，我仍然会得到同样的错误。我错过了什么？

Answer 1

修复是安装以下内容来管理SELinux：

sudo yum install libsemanage-static libsemanage-devel

文档中没有提到这一点：https://about.gitlab.com/downloads/#centos7 请点击此处查看问题：https://gitlab.com/gitlab-org/omnibus-gitlab/issues/2051

Gitlab Omnibus - 安装问题 - CentOS 7（SELinux）

1 个答案: