gitlab-runner is a free and open-source multi-platform build agent for GitLab CI/CD. GitLab Runner executes CI/CD jobs defined in GitLab pipelines, providing a FOSS alternative to GitHub Actions runners or CircleCI executors
1. Prerequisites
2. Supported Operating Systems
This guide supports installation on:
3. Installation
RHEL/CentOS/Rocky Linux/AlmaLinux
# Install EPEL repository if needed
sudo dnf install -y epel-release
# Install gitlab-runner
sudo dnf install -y gitlab-runner
# Enable and start service
sudo systemctl enable --now gitlab-runner
# Configure firewall
sudo firewall-cmd --permanent --add-port=N/A/tcp
sudo firewall-cmd --reload
# Verify installation
gitlab-runner --version
Debian/Ubuntu
# Update package index
sudo apt update
# Install gitlab-runner
sudo apt install -y gitlab-runner
# Enable and start service
sudo systemctl enable --now gitlab-runner
# Configure firewall
sudo ufw allow N/A
# Verify installation
gitlab-runner --version
Arch Linux
# Install gitlab-runner
sudo pacman -S gitlab-runner
# Enable and start service
sudo systemctl enable --now gitlab-runner
# Verify installation
gitlab-runner --version
Alpine Linux
# Install gitlab-runner
apk add --no-cache gitlab-runner
# Enable and start service
rc-update add gitlab-runner default
rc-service gitlab-runner start
# Verify installation
gitlab-runner --version
openSUSE/SLES
# Install gitlab-runner
sudo zypper install -y gitlab-runner
# Enable and start service
sudo systemctl enable --now gitlab-runner
# Configure firewall
sudo firewall-cmd --permanent --add-port=N/A/tcp
sudo firewall-cmd --reload
# Verify installation
gitlab-runner --version
macOS
# Using Homebrew
brew install gitlab-runner
# Start service
brew services start gitlab-runner
# Verify installation
gitlab-runner --version
FreeBSD
# Using pkg
pkg install gitlab-runner
# Enable in rc.conf
echo 'gitlab-runner_enable="YES"' >> /etc/rc.conf
# Start service
service gitlab-runner start
# Verify installation
gitlab-runner --version
Windows
# Using Chocolatey
choco install gitlab-runner
# Or using Scoop
scoop install gitlab-runner
# Verify installation
gitlab-runner --version
Initial Configuration
Basic Configuration
# Create configuration directory
sudo mkdir -p /etc/gitlab-runner
# Set up basic configuration
# See official documentation for detailed configuration options
# Test configuration
gitlab-runner --version
5. Service Management
systemd (RHEL, Debian, Ubuntu, Arch, openSUSE)
# Enable service
sudo systemctl enable gitlab-runner
# Start service
sudo systemctl start gitlab-runner
# Stop service
sudo systemctl stop gitlab-runner
# Restart service
sudo systemctl restart gitlab-runner
# Check status
sudo systemctl status gitlab-runner
# View logs
sudo journalctl -u gitlab-runner -f
OpenRC (Alpine Linux)
# Enable service
rc-update add gitlab-runner default
# Start service
rc-service gitlab-runner start
# Stop service
rc-service gitlab-runner stop
# Restart service
rc-service gitlab-runner restart
# Check status
rc-service gitlab-runner status
rc.d (FreeBSD)
# Enable in /etc/rc.conf
echo 'gitlab-runner_enable="YES"' >> /etc/rc.conf
# Start service
service gitlab-runner start
# Stop service
service gitlab-runner stop
# Restart service
service gitlab-runner restart
# Check status
service gitlab-runner status
launchd (macOS)
# Using Homebrew services
brew services start gitlab-runner
brew services stop gitlab-runner
brew services restart gitlab-runner
# Check status
brew services list | grep gitlab-runner
Windows Service Manager
# Start service
net start gitlab-runner
# Stop service
net stop gitlab-runner
# Using PowerShell
Start-Service gitlab-runner
Stop-Service gitlab-runner
Restart-Service gitlab-runner
# Check status
Get-Service gitlab-runner
Advanced Configuration
See the official documentation for advanced configuration options.
Reverse Proxy Setup
nginx Configuration
upstream gitlab-runner_backend {
server 127.0.0.1:N/A;
}
server {
listen 80;
server_name gitlab-runner.example.com;
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl http2;
server_name gitlab-runner.example.com;
ssl_certificate /etc/ssl/certs/gitlab-runner.example.com.crt;
ssl_certificate_key /etc/ssl/private/gitlab-runner.example.com.key;
location / {
proxy_pass http://gitlab-runner_backend;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
Apache Configuration
<VirtualHost *:80>
ServerName gitlab-runner.example.com
Redirect permanent / https://gitlab-runner.example.com/
</VirtualHost>
<VirtualHost *:443>
ServerName gitlab-runner.example.com
SSLEngine on
SSLCertificateFile /etc/ssl/certs/gitlab-runner.example.com.crt
SSLCertificateKeyFile /etc/ssl/private/gitlab-runner.example.com.key
ProxyRequests Off
ProxyPreserveHost On
ProxyPass / http://127.0.0.1:N/A/
ProxyPassReverse / http://127.0.0.1:N/A/
</VirtualHost>
HAProxy Configuration
frontend gitlab-runner_frontend
bind *:80
bind *:443 ssl crt /etc/ssl/certs/gitlab-runner.pem
redirect scheme https if !{ ssl_fc }
default_backend gitlab-runner_backend
backend gitlab-runner_backend
balance roundrobin
server gitlab-runner1 127.0.0.1:N/A check
Security Configuration
Basic Security Setup
# Set appropriate permissions
sudo chown -R gitlab-runner:gitlab-runner /etc/gitlab-runner
sudo chmod 750 /etc/gitlab-runner
# Configure firewall
sudo firewall-cmd --permanent --add-port=N/A/tcp
sudo firewall-cmd --reload
# Enable SELinux policies (if applicable)
sudo setsebool -P httpd_can_network_connect on
Database Setup
See official documentation for database configuration requirements.
Performance Optimization
System Tuning
# Basic system tuning
echo 'net.core.somaxconn = 65535' | sudo tee -a /etc/sysctl.conf
echo 'net.ipv4.tcp_max_syn_backlog = 65535' | sudo tee -a /etc/sysctl.conf
sudo sysctl -p
Monitoring
Basic Monitoring
# Check service status
sudo systemctl status gitlab-runner
# View logs
sudo journalctl -u gitlab-runner -f
# Monitor resource usage
top -p $(pgrep gitlab-runner)
9. Backup and Restore
Backup Script
#!/bin/bash
# Basic backup script
BACKUP_DIR="/backup/gitlab-runner"
DATE=$(date +%Y%m%d_%H%M%S)
mkdir -p "$BACKUP_DIR"
tar -czf "$BACKUP_DIR/gitlab-runner-backup-$DATE.tar.gz" /etc/gitlab-runner /var/lib/gitlab-runner
echo "Backup completed: $BACKUP_DIR/gitlab-runner-backup-$DATE.tar.gz"
Restore Procedure
# Stop service
sudo systemctl stop gitlab-runner
# Restore from backup
tar -xzf /backup/gitlab-runner/gitlab-runner-backup-*.tar.gz -C /
# Start service
sudo systemctl start gitlab-runner
6. Troubleshooting
Common Issues
1. Service won't start:
# Check logs
sudo journalctl -u gitlab-runner -n 100
sudo tail -f /var/log/gitlab-runner/gitlab-runner.log
# Check configuration
gitlab-runner --version
# Check permissions
ls -la /etc/gitlab-runner
2. Connection issues:
# Check if service is listening
sudo ss -tlnp | grep N/A
# Test connectivity
telnet localhost N/A
# Check firewall
sudo firewall-cmd --list-all
3. Performance issues:
# Check resource usage
top -p $(pgrep gitlab-runner)
# Check disk I/O
iotop -p $(pgrep gitlab-runner)
# Check connections
ss -an | grep N/A
Integration Examples
Docker Compose Example
version: '3.8'
services:
gitlab-runner:
image: gitlab-runner:latest
ports:
- "N/A:N/A"
volumes:
- ./config:/etc/gitlab-runner
- ./data:/var/lib/gitlab-runner
restart: unless-stopped
Maintenance
Update Procedures
# RHEL/CentOS/Rocky/AlmaLinux
sudo dnf update gitlab-runner
# Debian/Ubuntu
sudo apt update && sudo apt upgrade gitlab-runner
# Arch Linux
sudo pacman -Syu gitlab-runner
# Alpine Linux
apk update && apk upgrade gitlab-runner
# openSUSE
sudo zypper update gitlab-runner
# FreeBSD
pkg update && pkg upgrade gitlab-runner
# Always backup before updates
tar -czf /backup/gitlab-runner-pre-update-$(date +%Y%m%d).tar.gz /etc/gitlab-runner
# Restart after updates
sudo systemctl restart gitlab-runner
Regular Maintenance
# Log rotation
sudo logrotate -f /etc/logrotate.d/gitlab-runner
# Clean old logs
find /var/log/gitlab-runner -name "*.log" -mtime +30 -delete
# Check disk usage
du -sh /var/lib/gitlab-runner
Additional Resources
---
Note: This guide is part of the HowToMgr collection. Always refer to official documentation for the most up-to-date information.