init

README.md

+# Omnibus GitLab
+
+## Description
+
+This project creates full-stack platform-specific [downloadable packages for GitLab][downloads].
+For other installation options please see the
+[GitLab installation page][installation].
+
+## Canonical source
+
+The source of omnibus-gitlab is [hosted on
+GitLab.com](https://gitlab.com/gitlab-org/omnibus-gitlab) and there are mirrors
+to make contributing as easy as possible.
+
+## Documentation
+
+The documentation can be found in the [doc directory](doc/index.md).
+
+## Omnibus fork
+
+Omnibus GitLab is using a fork of [omnibus project](https://github.com/chef/omnibus).  For additional information see the comments in the [Gemfile](/Gemfile).
+
+## Deprecated links
+
+*We left the links below in the readme to preserve old links, but please use the [doc directory](doc/index.md) to browse the complete documentation.*
+
+## Contributing
+
+Please see the [contribution guidelines](CONTRIBUTING.md)
+
+## Installation
+
+Please follow the steps on the [downloads page][downloads].
+
+### After installation
+
+Your GitLab instance should be reachable over HTTP at the IP or hostname of your
+server. You can login as an admin user with username `root` and password `5iveL!fe`.
+
+See [doc/maintenance/index.md](doc/maintenance/index.md) for useful commands
+to control/debug your GitLab instance.
+
+### Configuration options
+
+See [doc/settings/configuration.md](doc/settings/configuration.md).
+
+#### Configuring the external URL for GitLab
+
+See [doc/settings/configuration.md](doc/settings/configuration.md#configuring-the-external-url-for-gitlab).
+
+#### Storing Git data in an alternative directory
+
+See [doc/settings/configuration.md](doc/settings/configuration.md#storing-git-data-in-an-alternative-directory).
+
+#### Changing the name of the Git user / group
+
+See [doc/settings/configuration.md](doc/settings/configuration.md#change-the-name-of-the-git-user-or-group).
+
+#### Setting up LDAP sign-in
+
+See [doc/settings/ldap.md](doc/settings/ldap.md).
+
+#### Enable HTTPS
+
+See [doc/settings/nginx.md](doc/settings/nginx.md#enable-https).
+
+#### Redirect `HTTP` requests to `HTTPS`
+
+See [doc/settings/nginx.md](doc/settings/nginx.md#redirect-http-requests-to-https).
+
+#### Change the default port and the ssl certificate locations
+
+See [doc/settings/nginx.md](doc/settings/nginx.md#change-the-default-port-and-the-ssl-certificate-locations).
+
+#### Use non-packaged web-server
+
+For using an existing Nginx, Passenger, or Apache webserver see [doc/settings/nginx.md](doc/settings/nginx.md#using-a-non-bundled-web-server).
+
+#### Using a non-packaged PostgreSQL database management server
+
+To connect to an external PostgreSQL DBMS see [doc/settings/database.md](doc/settings/database.md)
+
+#### Using a non-packaged Redis instance
+
+See [doc/settings/redis.md](doc/settings/redis.md).
+
+#### Adding ENV Vars to the Gitlab Runtime Environment
+
+See
+[doc/settings/environment-variables.md](doc/settings/environment-variables.md).
+
+#### Changing gitlab.yml settings
+
+See [doc/settings/gitlab.yml.md](doc/settings/gitlab.yml.md).
+
+#### Specify numeric user and group identifiers
+
+See [doc/settings/configuration.md](doc/settings/configuration.md#specify-numeric-user-and-group-identifiers).
+
+#### Sending application email via SMTP
+
+See [doc/settings/smtp.md](doc/settings/smtp.md).
+
+#### Omniauth (Google, Twitter, GitHub login)
+
+Omniauth configuration is documented in
+[docs.gitlab.com](https://docs.gitlab.com/ee/integration/omniauth.html).
+
+#### Adjusting Unicorn settings
+
+See [doc/settings/unicorn.md](doc/settings/unicorn.md).
+
+#### Setting the NGINX listen address or addresses
+
+See [doc/settings/nginx.md](doc/settings/nginx.md).
+
+#### Inserting custom NGINX settings into the GitLab server block
+
+See [doc/settings/nginx.md](doc/settings/nginx.md).
+
+#### Inserting custom settings into the NGINX config
+
+See [doc/settings/nginx.md](doc/settings/nginx.md).
+
+#### Only start omnibus-gitlab services after a given filesystem is mounted
+
+See [doc/settings/configuration.md](doc/settings/configuration.md#only-start-omnibus-gitlab-services-after-a-given-filesystem-is-mounted).
+
+### Updating
+
+Instructions for updating your Omnibus installation and upgrading from a manual
+installation are in the [update directory](doc/update/).
+
+### Uninstalling Omnibus GitLab
+
+See [doc/installation/index.md](doc/installation/index.md#uninstall-the-linux-package-omnibus).
+
+### Common installation problems
+
+This section has been moved to the separate document [doc/troubleshooting.md](doc/troubleshooting.md).
+
+Section below remains for historical reasons(mainly to not break existing links). Each section contains the link to the new location.
+
+#### Apt error 'The requested URL returned error: 403'
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#apt-error-the-requested-url-returned-error-403).
+
+#### GitLab is unreachable in my browser
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#gitlab-is-unreachable-in-my-browser).
+
+#### Emails are not being delivered
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#emails-are-not-being-delivered).
+
+#### TCP ports for GitLab services are already taken
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#tcp-ports-for-gitlab-services-are-already-taken).
+
+#### Git SSH access stops working on SELinux-enabled systems
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#selinux-enabled-systems).
+
+#### Postgres error 'FATAL:  could not create shared memory segment: Cannot allocate memory'
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#postgresql-error-fatal-could-not-create-shared-memory-segment-cannot-allocate-memory).
+
+#### Reconfigure complains about the GLIBC version
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#reconfigure-complains-about-the-glibc-version).
+
+#### Reconfigure fails to create the git user
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#reconfigure-fails-to-create-the-git-user).
+
+#### Failed to modify kernel parameters with sysctl
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#failed-to-modify-kernel-parameters-with-sysctl).
+
+#### I am unable to install omnibus-gitlab without root access
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#i-am-unable-to-install-omnibus-gitlab-without-root-access).
+
+#### gitlab-rake assets:precompile fails with 'Permission denied'
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#gitlab-rake-assetsprecompile-fails-with-permission-denied).
+
+#### 'Short read or OOM loading DB' error
+
+See [doc/troubleshooting.md](doc/troubleshooting.md#short-read-or-oom-loading-db-error).
+
+### Backups
+
+See [doc/settings/backups.md](doc/settings/backups.md).
+
+#### Backup and restore omnibus-gitlab configuration
+
+See [doc/settings/backups.md](doc/settings/backups.md#backup-and-restore-omnibus-gitlab-configuration).
+
+#### Creating an application backup
+
+See [doc/settings/backups.md](doc/settings/backups.md#creating-an-application-backup).
+
+### Restoring an application backup
+
+See [restore documentation](https://docs.gitlab.com/ee/administration/backup_restore/restore_gitlab.html#restore-for-linux-package-installations).
+
+### Backup and restore using non-packaged database
+
+If you are using non-packaged database see [documentation on using non-packaged database](doc/settings/database.md#using-a-non-packaged-postgresql-database-management-server).
+
+### Upload backups to remote (cloud) storage
+
+For details check [backup documentation](https://docs.gitlab.com/ee/administration/backup_restore/backup_gitlab.html#upload-backups-to-a-remote-cloud-storage).
+
+## Invoking Rake tasks
+
+See [doc/maintenance/index.md](doc/maintenance/index.md#invoking-rake-tasks).
+
+## Directory structure
+
+Omnibus-gitlab uses four different directories.
+
+- `/opt/gitlab` holds application code for GitLab and its dependencies.
+- `/var/opt/gitlab` holds application data and configuration files that
+  `gitlab-ctl reconfigure` writes to.
+- `/etc/gitlab` holds configuration files for omnibus-gitlab. These are
+  the only files that you should ever have to edit manually.
+- `/var/log/gitlab` contains all log data generated by components of
+  omnibus-gitlab.
+
+## Omnibus-gitlab and SELinux
+
+Although omnibus-gitlab runs on systems that have SELinux enabled, it does not
+use SELinux confinement features:
+
+- omnibus-gitlab creates unconfined system users;
+- omnibus-gitlab services run in an unconfined context.
+
+The correct operation of Git access via SSH depends on the labeling of
+`/var/opt/gitlab/.ssh`. If needed you can restore this labeling by running
+`sudo gitlab-ctl reconfigure`.
+
+Depending on your platform, `gitlab-ctl reconfigure` will install SELinux
+modules required to make GitLab work. These modules are listed in
+[files/gitlab-selinux/README.md](files/gitlab-selinux/README.md).
+
+NSA, if you're reading this, we'd really appreciate it if you could contribute
+back a SELinux profile for omnibus-gitlab :)
+Of course, if anyone else is reading this, you're welcome to contribute the
+SELinux profile too.
+
+### Logs
+
+This section has been moved to separate document [doc/settings/logs.md](doc/settings/logs.md).
+
+#### Tail logs in a console on the server
+
+See [doc/settings/logs.md](doc/settings/logs.md#tail-logs-in-a-console-on-the-server).
+
+##### Runit logs
+
+See [doc/settings/logs.md](doc/settings/logs.md#runit-logs).
+
+##### Logrotate
+
+See [doc/settings/logs.md](doc/settings/logs.md#logrotate).
+
+##### UDP log shipping (GitLab Enterprise Edition only)
+
+See [doc/settings/logs.md](doc/settings/logs.md#udp-log-shipping-gitlab-enterprise-edition-only)
+
+### Create a user and database for GitLab
+
+See [doc/settings/database.md](doc/settings/database.md).
+
+### Configure omnibus-gitlab to connect to it
+
+See [doc/settings/database.md](doc/settings/database.md).
+
+### Seed the database (fresh installs only)
+
+See [doc/settings/database.md](doc/settings/database.md).
+
+## Building your own package
+
+See [the separate build documentation](doc/build/index.md).
+
+## Running a custom GitLab version
+
+It is not recommended to make changes to any of the files in `/opt/gitlab`
+after installing omnibus-gitlab: they will either conflict with or be
+overwritten by future updates. If you want to run a custom version of GitLab
+you can [build your own package](doc/build/index.md) or use [another installation
+method][CE README].
+
+## Acknowledgments
+
+This omnibus installer project is based on the awesome work done by Chef in
+[omnibus-chef-server][omnibus-chef-server].
+
+[downloads]: https://about.gitlab.com/downloads/
+[CE README]: https://gitlab.com/gitlab-org/gitlab-foss/blob/master/README.md
+[omnibus-chef-server]: https://github.com/opscode/omnibus-chef-server
+[database.yml.mysql]: https://gitlab.com/gitlab-org/gitlab-foss/blob/master/config/database.yml.mysql
+[svlogd]: http://smarden.org/runit/svlogd.8.html
+[installation]: https://about.gitlab.com/install/
+[gitlab.rb.template]: https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-config-template/gitlab.rb.template

Rakefile

+# All tasks in files placed in lib/gitlab/tasks ending in .rake will be loaded
+# automatically
+require 'knapsack'
+Rake.add_rakelib 'lib/gitlab/tasks'
+Knapsack.load_tasks

VERSION

+master

config/patches/bzip2/makefile_take_env_vars.patch

+--- bzip2-1.0.6/Makefile-orig	2010-09-10 17:46:02.000000000 -0500
++++ bzip2-1.0.6/Makefile	2013-11-21 13:55:11.000000000 -0600
+@@ -18,10 +18,10 @@
+ CC=gcc
+ AR=ar
+ RANLIB=ranlib
+-LDFLAGS=
++LDFLAGS+=
+ 
+ BIGFILES=-D_FILE_OFFSET_BITS=64
+-CFLAGS=-Wall -Winline -O2 -g $(BIGFILES)
++CFLAGS+=-Wall -Winline -O2 -g $(BIGFILES)
+ 
+ # Where you want it installed when you do 'make install'
+ PREFIX=/usr/local

config/patches/cacerts/license/2022.07.19/add-license-file.patch

+diff --git a/LICENSE b/LICENSE
+new file mode 100644
+index 0000000..a612ad9
+--- /dev/null
++++ b/LICENSE
+@@ -0,0 +1,373 @@
++Mozilla Public License Version 2.0
++==================================
++
++1. Definitions
++--------------
++
++1.1. "Contributor"
++    means each individual or legal entity that creates, contributes to
++    the creation of, or owns Covered Software.
++
++1.2. "Contributor Version"
++    means the combination of the Contributions of others (if any) used
++    by a Contributor and that particular Contributor's Contribution.
++
++1.3. "Contribution"
++    means Covered Software of a particular Contributor.
++
++1.4. "Covered Software"
++    means Source Code Form to which the initial Contributor has attached
++    the notice in Exhibit A, the Executable Form of such Source Code
++    Form, and Modifications of such Source Code Form, in each case
++    including portions thereof.
++
++1.5. "Incompatible With Secondary Licenses"
++    means
++
++    (a) that the initial Contributor has attached the notice described
++        in Exhibit B to the Covered Software; or
++
++    (b) that the Covered Software was made available under the terms of
++        version 1.1 or earlier of the License, but not also under the
++        terms of a Secondary License.
++
++1.6. "Executable Form"
++    means any form of the work other than Source Code Form.
++
++1.7. "Larger Work"
++    means a work that combines Covered Software with other material, in
++    a separate file or files, that is not Covered Software.
++
++1.8. "License"
++    means this document.
++
++1.9. "Licensable"
++    means having the right to grant, to the maximum extent possible,
++    whether at the time of the initial grant or subsequently, any and
++    all of the rights conveyed by this License.
++
++1.10. "Modifications"
++    means any of the following:
++
++    (a) any file in Source Code Form that results from an addition to,
++        deletion from, or modification of the contents of Covered
++        Software; or
++
++    (b) any new file in Source Code Form that contains any Covered
++        Software.
++
++1.11. "Patent Claims" of a Contributor
++    means any patent claim(s), including without limitation, method,
++    process, and apparatus claims, in any patent Licensable by such
++    Contributor that would be infringed, but for the grant of the
++    License, by the making, using, selling, offering for sale, having
++    made, import, or transfer of either its Contributions or its
++    Contributor Version.
++
++1.12. "Secondary License"
++    means either the GNU General Public License, Version 2.0, the GNU
++    Lesser General Public License, Version 2.1, the GNU Affero General
++    Public License, Version 3.0, or any later versions of those
++    licenses.
++
++1.13. "Source Code Form"
++    means the form of the work preferred for making modifications.
++
++1.14. "You" (or "Your")
++    means an individual or a legal entity exercising rights under this
++    License. For legal entities, "You" includes any entity that
++    controls, is controlled by, or is under common control with You. For
++    purposes of this definition, "control" means (a) the power, direct
++    or indirect, to cause the direction or management of such entity,
++    whether by contract or otherwise, or (b) ownership of more than
++    fifty percent (50%) of the outstanding shares or beneficial
++    ownership of such entity.
++
++2. License Grants and Conditions
++--------------------------------
++
++2.1. Grants
++
++Each Contributor hereby grants You a world-wide, royalty-free,
++non-exclusive license:
++
++(a) under intellectual property rights (other than patent or trademark)
++    Licensable by such Contributor to use, reproduce, make available,
++    modify, display, perform, distribute, and otherwise exploit its
++    Contributions, either on an unmodified basis, with Modifications, or
++    as part of a Larger Work; and
++
++(b) under Patent Claims of such Contributor to make, use, sell, offer
++    for sale, have made, import, and otherwise transfer either its
++    Contributions or its Contributor Version.
++
++2.2. Effective Date
++
++The licenses granted in Section 2.1 with respect to any Contribution
++become effective for each Contribution on the date the Contributor first
++distributes such Contribution.
++
++2.3. Limitations on Grant Scope
++
++The licenses granted in this Section 2 are the only rights granted under
++this License. No additional rights or licenses will be implied from the
++distribution or licensing of Covered Software under this License.
++Notwithstanding Section 2.1(b) above, no patent license is granted by a
++Contributor:
++
++(a) for any code that a Contributor has removed from Covered Software;
++    or
++
++(b) for infringements caused by: (i) Your and any other third party's
++    modifications of Covered Software, or (ii) the combination of its
++    Contributions with other software (except as part of its Contributor
++    Version); or
++
++(c) under Patent Claims infringed by Covered Software in the absence of
++    its Contributions.
++
++This License does not grant any rights in the trademarks, service marks,
++or logos of any Contributor (except as may be necessary to comply with
++the notice requirements in Section 3.4).
++
++2.4. Subsequent Licenses
++
++No Contributor makes additional grants as a result of Your choice to
++distribute the Covered Software under a subsequent version of this
++License (see Section 10.2) or under the terms of a Secondary License (if
++permitted under the terms of Section 3.3).
++
++2.5. Representation
++
++Each Contributor represents that the Contributor believes its
++Contributions are its original creation(s) or it has sufficient rights
++to grant the rights to its Contributions conveyed by this License.
++
++2.6. Fair Use
++
++This License is not intended to limit any rights You have under
++applicable copyright doctrines of fair use, fair dealing, or other
++equivalents.
++
++2.7. Conditions
++
++Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
++in Section 2.1.
++
++3. Responsibilities
++-------------------
++
++3.1. Distribution of Source Form
++
++All distribution of Covered Software in Source Code Form, including any
++Modifications that You create or to which You contribute, must be under
++the terms of this License. You must inform recipients that the Source
++Code Form of the Covered Software is governed by the terms of this
++License, and how they can obtain a copy of this License. You may not
++attempt to alter or restrict the recipients' rights in the Source Code
++Form.
++
++3.2. Distribution of Executable Form
++
++If You distribute Covered Software in Executable Form then:
++
++(a) such Covered Software must also be made available in Source Code
++    Form, as described in Section 3.1, and You must inform recipients of
++    the Executable Form how they can obtain a copy of such Source Code
++    Form by reasonable means in a timely manner, at a charge no more
++    than the cost of distribution to the recipient; and
++
++(b) You may distribute such Executable Form under the terms of this
++    License, or sublicense it under different terms, provided that the
++    license for the Executable Form does not attempt to limit or alter
++    the recipients' rights in the Source Code Form under this License.
++
++3.3. Distribution of a Larger Work
++
++You may create and distribute a Larger Work under terms of Your choice,
++provided that You also comply with the requirements of this License for
++the Covered Software. If the Larger Work is a combination of Covered
++Software with a work governed by one or more Secondary Licenses, and the
++Covered Software is not Incompatible With Secondary Licenses, this
++License permits You to additionally distribute such Covered Software
++under the terms of such Secondary License(s), so that the recipient of
++the Larger Work may, at their option, further distribute the Covered
++Software under the terms of either this License or such Secondary
++License(s).
++
++3.4. Notices
++
++You may not remove or alter the substance of any license notices
++(including copyright notices, patent notices, disclaimers of warranty,
++or limitations of liability) contained within the Source Code Form of
++the Covered Software, except that You may alter any license notices to
++the extent required to remedy known factual inaccuracies.
++
++3.5. Application of Additional Terms
++
++You may choose to offer, and to charge a fee for, warranty, support,
++indemnity or liability obligations to one or more recipients of Covered
++Software. However, You may do so only on Your own behalf, and not on
++behalf of any Contributor. You must make it absolutely clear that any
++such warranty, support, indemnity, or liability obligation is offered by
++You alone, and You hereby agree to indemnify every Contributor for any
++liability incurred by such Contributor as a result of warranty, support,
++indemnity or liability terms You offer. You may include additional
++disclaimers of warranty and limitations of liability specific to any
++jurisdiction.
++
++4. Inability to Comply Due to Statute or Regulation
++---------------------------------------------------
++
++If it is impossible for You to comply with any of the terms of this
++License with respect to some or all of the Covered Software due to
++statute, judicial order, or regulation then You must: (a) comply with
++the terms of this License to the maximum extent possible; and (b)
++describe the limitations and the code they affect. Such description must
++be placed in a text file included with all distributions of the Covered
++Software under this License. Except to the extent prohibited by statute
++or regulation, such description must be sufficiently detailed for a
++recipient of ordinary skill to be able to understand it.
++
++5. Termination
++--------------
++
++5.1. The rights granted under this License will terminate automatically
++if You fail to comply with any of its terms. However, if You become
++compliant, then the rights granted under this License from a particular
++Contributor are reinstated (a) provisionally, unless and until such
++Contributor explicitly and finally terminates Your grants, and (b) on an
++ongoing basis, if such Contributor fails to notify You of the
++non-compliance by some reasonable means prior to 60 days after You have
++come back into compliance. Moreover, Your grants from a particular
++Contributor are reinstated on an ongoing basis if such Contributor
++notifies You of the non-compliance by some reasonable means, this is the
++first time You have received notice of non-compliance with this License
++from such Contributor, and You become compliant prior to 30 days after
++Your receipt of the notice.
++
++5.2. If You initiate litigation against any entity by asserting a patent
++infringement claim (excluding declaratory judgment actions,
++counter-claims, and cross-claims) alleging that a Contributor Version
++directly or indirectly infringes any patent, then the rights granted to
++You by any and all Contributors for the Covered Software under Section
++2.1 of this License shall terminate.
++
++5.3. In the event of termination under Sections 5.1 or 5.2 above, all
++end user license agreements (excluding distributors and resellers) which
++have been validly granted by You or Your distributors under this License
++prior to termination shall survive termination.
++
++************************************************************************
++*                                                                      *
++*  6. Disclaimer of Warranty                                           *
++*  -------------------------                                           *
++*                                                                      *
++*  Covered Software is provided under this License on an "as is"       *
++*  basis, without warranty of any kind, either expressed, implied, or  *
++*  statutory, including, without limitation, warranties that the       *
++*  Covered Software is free of defects, merchantable, fit for a        *
++*  particular purpose or non-infringing. The entire risk as to the     *
++*  quality and performance of the Covered Software is with You.        *
++*  Should any Covered Software prove defective in any respect, You     *
++*  (not any Contributor) assume the cost of any necessary servicing,   *
++*  repair, or correction. This disclaimer of warranty constitutes an   *
++*  essential part of this License. No use of any Covered Software is   *
++*  authorized under this License except under this disclaimer.         *
++*                                                                      *
++************************************************************************
++
++************************************************************************
++*                                                                      *
++*  7. Limitation of Liability                                          *
++*  --------------------------                                          *
++*                                                                      *
++*  Under no circumstances and under no legal theory, whether tort      *
++*  (including negligence), contract, or otherwise, shall any           *
++*  Contributor, or anyone who distributes Covered Software as          *
++*  permitted above, be liable to You for any direct, indirect,         *
++*  special, incidental, or consequential damages of any character      *
++*  including, without limitation, damages for lost profits, loss of    *
++*  goodwill, work stoppage, computer failure or malfunction, or any    *
++*  and all other commercial damages or losses, even if such party      *
++*  shall have been informed of the possibility of such damages. This   *
++*  limitation of liability shall not apply to liability for death or   *
++*  personal injury resulting from such party's negligence to the       *
++*  extent applicable law prohibits such limitation. Some               *
++*  jurisdictions do not allow the exclusion or limitation of           *
++*  incidental or consequential damages, so this exclusion and          *
++*  limitation may not apply to You.                                    *
++*                                                                      *
++************************************************************************
++
++8. Litigation
++-------------
++
++Any litigation relating to this License may be brought only in the
++courts of a jurisdiction where the defendant maintains its principal
++place of business and such litigation shall be governed by laws of that
++jurisdiction, without reference to its conflict-of-law provisions.
++Nothing in this Section shall prevent a party's ability to bring
++cross-claims or counter-claims.
++
++9. Miscellaneous
++----------------
++
++This License represents the complete agreement concerning the subject
++matter hereof. If any provision of this License is held to be
++unenforceable, such provision shall be reformed only to the extent
++necessary to make it enforceable. Any law or regulation which provides
++that the language of a contract shall be construed against the drafter
++shall not be used to construe this License against a Contributor.
++
++10. Versions of the License
++---------------------------
++
++10.1. New Versions
++
++Mozilla Foundation is the license steward. Except as provided in Section
++10.3, no one other than the license steward has the right to modify or
++publish new versions of this License. Each version will be given a
++distinguishing version number.
++
++10.2. Effect of New Versions
++
++You may distribute the Covered Software under the terms of the version
++of the License under which You originally received the Covered Software,
++or under the terms of any subsequent version published by the license
++steward.
++
++10.3. Modified Versions
++
++If you create software not governed by this License, and you want to
++create a new license for such software, you may create and use a
++modified version of this License if you rename the license and remove
++any references to the name of the license steward (except to note that
++such modified license differs from this License).
++
++10.4. Distributing Source Code Form that is Incompatible With Secondary
++Licenses
++
++If You choose to distribute Source Code Form that is Incompatible With
++Secondary Licenses under the terms of this version of the License, the
++notice described in Exhibit B of this License must be attached.
++
++Exhibit A - Source Code Form License Notice
++-------------------------------------------
++
++  This Source Code Form is subject to the terms of the Mozilla Public
++  License, v. 2.0. If a copy of the MPL was not distributed with this
++  file, You can obtain one at http://mozilla.org/MPL/2.0/.
++
++If it is not possible or desirable to put the notice in a particular
++file, then You may include the notice in a location (such as a LICENSE
++file in a relevant directory) where a recipient would be likely to look
++for such a notice.
++
++You may add additional accurate notices of copyright ownership.
++
++Exhibit B - "Incompatible With Secondary Licenses" Notice
++---------------------------------------------------------
++
++  This Source Code Form is "Incompatible With Secondary Licenses", as
++  defined by the Mozilla Public License, v. 2.0.
+

config/patches/chef-gem/drop-eol-warning.patch

+diff --git a/lib/chef/client.rb b/lib/chef/client.rb
+index a0c3bbf331..626f0fac56 100644
+--- a/lib/chef/client.rb
++++ b/lib/chef/client.rb
+@@ -337,15 +337,6 @@ class Chef
+ 
+     # @api private
+     def warn_if_eol
+-      require_relative "version"
+-
+-      # We make a release every year so take the version you're on + 2006 and you get
+-      # the year it goes EOL
+-      eol_year = 2006 + Gem::Version.new(Chef::VERSION).segments.first
+-
+-      if Time.now > Time.new(eol_year, 5, 01)
+-        logger.warn("This release of #{ChefUtils::Dist::Infra::PRODUCT} became end of life (EOL) on May 1st #{eol_year}. Please update to a supported release to receive new features, bug fixes, and security updates.")
+-      end
+     end
+ 
+     # @api private

config/patches/chef-gem/license/add-license-file.patch

+diff --git a/LICENSE b/LICENSE
+new file mode 100644
+index 0000000..11069ed
+--- /dev/null
++++ b/LICENSE
+@@ -0,0 +1,201 @@
++                              Apache License
++                        Version 2.0, January 2004
++                     http://www.apache.org/licenses/
++
++TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
++
++1. Definitions.
++
++   "License" shall mean the terms and conditions for use, reproduction,
++   and distribution as defined by Sections 1 through 9 of this document.
++
++   "Licensor" shall mean the copyright owner or entity authorized by
++   the copyright owner that is granting the License.
++
++   "Legal Entity" shall mean the union of the acting entity and all
++   other entities that control, are controlled by, or are under common
++   control with that entity. For the purposes of this definition,
++   "control" means (i) the power, direct or indirect, to cause the
++   direction or management of such entity, whether by contract or
++   otherwise, or (ii) ownership of fifty percent (50%) or more of the
++   outstanding shares, or (iii) beneficial ownership of such entity.
++
++   "You" (or "Your") shall mean an individual or Legal Entity
++   exercising permissions granted by this License.
++
++   "Source" form shall mean the preferred form for making modifications,
++   including but not limited to software source code, documentation
++   source, and configuration files.
++
++   "Object" form shall mean any form resulting from mechanical
++   transformation or translation of a Source form, including but
++   not limited to compiled object code, generated documentation,
++   and conversions to other media types.
++
++   "Work" shall mean the work of authorship, whether in Source or
++   Object form, made available under the License, as indicated by a
++   copyright notice that is included in or attached to the work
++   (an example is provided in the Appendix below).
++
++   "Derivative Works" shall mean any work, whether in Source or Object
++   form, that is based on (or derived from) the Work and for which the
++   editorial revisions, annotations, elaborations, or other modifications
++   represent, as a whole, an original work of authorship. For the purposes
++   of this License, Derivative Works shall not include works that remain
++   separable from, or merely link (or bind by name) to the interfaces of,
++   the Work and Derivative Works thereof.
++
++   "Contribution" shall mean any work of authorship, including
++   the original version of the Work and any modifications or additions
++   to that Work or Derivative Works thereof, that is intentionally
++   submitted to Licensor for inclusion in the Work by the copyright owner
++   or by an individual or Legal Entity authorized to submit on behalf of
++   the copyright owner. For the purposes of this definition, "submitted"
++   means any form of electronic, verbal, or written communication sent
++   to the Licensor or its representatives, including but not limited to
++   communication on electronic mailing lists, source code control systems,
++   and issue tracking systems that are managed by, or on behalf of, the
++   Licensor for the purpose of discussing and improving the Work, but
++   excluding communication that is conspicuously marked or otherwise
++   designated in writing by the copyright owner as "Not a Contribution."
++
++   "Contributor" shall mean Licensor and any individual or Legal Entity
++   on behalf of whom a Contribution has been received by Licensor and
++   subsequently incorporated within the Work.
++
++2. Grant of Copyright License. Subject to the terms and conditions of
++   this License, each Contributor hereby grants to You a perpetual,
++   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
++   copyright license to reproduce, prepare Derivative Works of,
++   publicly display, publicly perform, sublicense, and distribute the
++   Work and such Derivative Works in Source or Object form.
++
++3. Grant of Patent License. Subject to the terms and conditions of
++   this License, each Contributor hereby grants to You a perpetual,
++   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
++   (except as stated in this section) patent license to make, have made,
++   use, offer to sell, sell, import, and otherwise transfer the Work,
++   where such license applies only to those patent claims licensable
++   by such Contributor that are necessarily infringed by their
++   Contribution(s) alone or by combination of their Contribution(s)
++   with the Work to which such Contribution(s) was submitted. If You
++   institute patent litigation against any entity (including a
++   cross-claim or counterclaim in a lawsuit) alleging that the Work
++   or a Contribution incorporated within the Work constitutes direct
++   or contributory patent infringement, then any patent licenses
++   granted to You under this License for that Work shall terminate
++   as of the date such litigation is filed.
++
++4. Redistribution. You may reproduce and distribute copies of the
++   Work or Derivative Works thereof in any medium, with or without
++   modifications, and in Source or Object form, provided that You
++   meet the following conditions:
++
++   (a) You must give any other recipients of the Work or
++       Derivative Works a copy of this License; and
++
++   (b) You must cause any modified files to carry prominent notices
++       stating that You changed the files; and
++
++   (c) You must retain, in the Source form of any Derivative Works
++       that You distribute, all copyright, patent, trademark, and
++       attribution notices from the Source form of the Work,
++       excluding those notices that do not pertain to any part of
++       the Derivative Works; and
++
++   (d) If the Work includes a "NOTICE" text file as part of its
++       distribution, then any Derivative Works that You distribute must
++       include a readable copy of the attribution notices contained
++       within such NOTICE file, excluding those notices that do not
++       pertain to any part of the Derivative Works, in at least one
++       of the following places: within a NOTICE text file distributed
++       as part of the Derivative Works; within the Source form or
++       documentation, if provided along with the Derivative Works; or,
++       within a display generated by the Derivative Works, if and
++       wherever such third-party notices normally appear. The contents
++       of the NOTICE file are for informational purposes only and
++       do not modify the License. You may add Your own attribution
++       notices within Derivative Works that You distribute, alongside
++       or as an addendum to the NOTICE text from the Work, provided
++       that such additional attribution notices cannot be construed
++       as modifying the License.
++
++   You may add Your own copyright statement to Your modifications and
++   may provide additional or different license terms and conditions
++   for use, reproduction, or distribution of Your modifications, or
++   for any such Derivative Works as a whole, provided Your use,
++   reproduction, and distribution of the Work otherwise complies with
++   the conditions stated in this License.
++
++5. Submission of Contributions. Unless You explicitly state otherwise,
++   any Contribution intentionally submitted for inclusion in the Work
++   by You to the Licensor shall be under the terms and conditions of
++   this License, without any additional terms or conditions.
++   Notwithstanding the above, nothing herein shall supersede or modify
++   the terms of any separate license agreement you may have executed
++   with Licensor regarding such Contributions.
++
++6. Trademarks. This License does not grant permission to use the trade
++   names, trademarks, service marks, or product names of the Licensor,
++   except as required for reasonable and customary use in describing the
++   origin of the Work and reproducing the content of the NOTICE file.
++
++7. Disclaimer of Warranty. Unless required by applicable law or
++   agreed to in writing, Licensor provides the Work (and each
++   Contributor provides its Contributions) on an "AS IS" BASIS,
++   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
++   implied, including, without limitation, any warranties or conditions
++   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
++   PARTICULAR PURPOSE. You are solely responsible for determining the
++   appropriateness of using or redistributing the Work and assume any
++   risks associated with Your exercise of permissions under this License.
++
++8. Limitation of Liability. In no event and under no legal theory,
++   whether in tort (including negligence), contract, or otherwise,
++   unless required by applicable law (such as deliberate and grossly
++   negligent acts) or agreed to in writing, shall any Contributor be
++   liable to You for damages, including any direct, indirect, special,
++   incidental, or consequential damages of any character arising as a
++   result of this License or out of the use or inability to use the
++   Work (including but not limited to damages for loss of goodwill,
++   work stoppage, computer failure or malfunction, or any and all
++   other commercial damages or losses), even if such Contributor
++   has been advised of the possibility of such damages.
++
++9. Accepting Warranty or Additional Liability. While redistributing
++   the Work or Derivative Works thereof, You may choose to offer,
++   and charge a fee for, acceptance of support, warranty, indemnity,
++   or other liability obligations and/or rights consistent with this
++   License. However, in accepting such obligations, You may act only
++   on Your own behalf and on Your sole responsibility, not on behalf
++   of any other Contributor, and only if You agree to indemnify,
++   defend, and hold each Contributor harmless for any liability
++   incurred by, or claims asserted against, such Contributor by reason
++   of your accepting any such warranty or additional liability.
++
++END OF TERMS AND CONDITIONS
++
++APPENDIX: How to apply the Apache License to your work.
++
++   To apply the Apache License to your work, attach the following
++   boilerplate notice, with the fields enclosed by brackets "[]"
++   replaced with your own identifying information. (Don't include
++   the brackets!)  The text should be enclosed in the appropriate
++   comment syntax for the file format. We also recommend that a
++   file or class name and description of purpose be included on the
++   same "printed page" as the copyright notice for easier
++   identification within third-party archives.
++
++Copyright [yyyy] [name of copyright owner]
++
++Licensed under the Apache License, Version 2.0 (the "License");
++you may not use this file except in compliance with the License.
++You may obtain a copy of the License at
++
++    http://www.apache.org/licenses/LICENSE-2.0
++
++Unless required by applicable law or agreed to in writing, software
++distributed under the License is distributed on an "AS IS" BASIS,
++WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
++See the License for the specific language governing permissions and
++limitations under the License.

config/patches/chef-gem/license/add-notice-file.patch

+diff --git a/NOTICE b/NOTICE
+new file mode 100644
+index 000000000..932967f59
+--- /dev/null
++++ b/NOTICE
+@@ -0,0 +1,21 @@
++Chef NOTICE
++===========
++
++Developed at Chef (https://www.chef.io).
++
++Contributors and Copyright holders:
++
++ * Copyright 2008-2016, Adam Jacob <adam@chef.io>
++ * Copyright 2008-2016, Arjuna Christensen <aj@hjksolutions.com>
++ * Copyright 2008-2016, Bryan McLellan <btm@loftninjas.org>
++ * Copyright 2008-2016, Ezra Zygmuntowicz <ezra@engineyard.com>
++ * Copyright 2009-2016, Sean Cribbs <seancribbs@gmail.com>
++ * Copyright 2009-2016, Christopher Brown <cb@chef.io>
++ * Copyright 2009-2016, Thom May <thom@clearairturbulence.org>
++ * Copyright 2009-2016, Joe Williams <joe@joetify.com>
++
++Chef incorporates code modified from Open4 (http://www.codeforpeople.com/lib/ruby/open4/), which was written by Ara T. Howard.
++
++Chef incorporates code modified from deep_merge (http://trac.misuse.org/science/wiki/DeepMerge), which is Copyright 2008-2016, Steve Midgley
++
++Chef incorporates code modified from diff-lcs (http://diff-lcs.rubyforge.org/), which is Copyright (c) 2004–2013 Austin Ziegler

config/patches/chef-gem/utf8-locale-support.patch

+diff --git a/chef-config/lib/chef-config/config.rb b/chef-config/lib/chef-config/config.rb
+index 970ee840a9..c66d8ea3fb 100644
+--- a/chef-config/lib/chef-config/config.rb
++++ b/chef-config/lib/chef-config/config.rb
+@@ -1215,7 +1215,7 @@ module ChefConfig
+       cmd.error!
+       locales = cmd.stdout.split
+       case
+-      when locales.include?("C.UTF-8")
++      when locales.include?("C.UTF-8"), locales.include?("C.utf8")
+         "C.UTF-8"
+       when locales.include?("en_US.UTF-8"), locales.include?("en_US.utf8")
+         "en_US.UTF-8"

config/patches/config_guess/add-license-file.patch

+diff --git a/LICENSE b/LICENSE
+new file mode 100644
+index 0000000..9b862c1
+--- /dev/null
++++ b/LICENSE
+@@ -0,0 +1,25 @@
++Note: Below license information is extracted from the following files:
++      * /opt/gitlab/embedded/lib/config_guess/config.guess
++      * /opt/gitlab/embedded/lib/config_guess/config.sub
++
++Copyright 1992-2016 Free Software Foundation, Inc.
++
++This file is free software; you can redistribute it and/or modify it
++under the terms of the GNU General Public License as published by
++the Free Software Foundation; either version 3 of the License, or
++(at your option) any later version.
++
++This program is distributed in the hope that it will be useful, but
++WITHOUT ANY WARRANTY; without even the implied warranty of
++MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
++General Public License for more details.
++
++You should have received a copy of the GNU General Public License
++along with this program; if not, see <http://www.gnu.org/licenses/>.
++
++As a special exception to the GNU General Public License, if you
++distribute this file as part of a program that contains a
++configuration script generated by Autoconf, you may include it under
++the same distribution terms that you use for the rest of that
++program.  This Exception is an additional permission under section 7
++of the GNU General Public License, version 3 ("GPLv3").

config/patches/exiftool/lib-location.patch

+diff --git a/exiftool b/exiftool
+index bdf9d4f5..aa30cbda 100755
+--- a/exiftool
++++ b/exiftool
+@@ -31,6 +31,7 @@ BEGIN {
+     $Image::ExifTool::exeDir = $exeDir; # use our exeDir for loading config file
+     # add lib directory at start of include path
+     unshift @INC, $incDir;
++    push ( @INC, "/opt/gitlab/embedded/lib/exiftool-perl");
+     # load or disable config file if specified
+     if (@ARGV and lc($ARGV[0]) eq '-config') {
+         shift;

config/patches/git-filter-repo/license/add-license-file.patch

+diff --git a/COPYING b/COPYING
+new file mode 100644
+index 0000000..d594590
+--- /dev/null
++++ b/COPYING
+@@ -0,0 +1,23 @@
++git-filter-repo itself and most the files in this repository (exceptions
++noted below) are provided under the MIT license (see COPYING.mit).
++
++The usage of the MIT license probably makes filter-repo compatible with
++everything, but just in case, these files can also be used under whatever
++open source license[1] that git.git or libgit2 use now or in the future
++(currently GPL[2] and GPL-with-linking-exception[3]).  Further, the
++examples (in contrib/filter-repo-demos/ and t/t9391/) can also be used
++under the same license that libgit2 provides their examples under (CC0,
++currently[4]).
++
++Exceptions:
++
++  - The test harness (t/test-lib.sh, t/test-lib-functions.sh) is a slightly
++    modified copy of git.git's test harness (the difference being that my
++    copy doesn't require a built version of 'git' to be present).  These
++    are thus GPL2 (see COPYING.gpl), and are individually marked as such.
++
++
++[1] ...as defined by the Open Source Initiative (https://opensource.org/)
++[2] https://git.kernel.org/pub/scm/git/git.git/tree/COPYING
++[3] https://github.com/libgit2/libgit2/blob/master/COPYING
++[4] https://github.com/libgit2/libgit2/blob/master/examples/COPYING

config/patches/git-filter-repo/license/add-mit-license-file.patch

+diff --git a/COPYING.mit b/COPYING.mit
+new file mode 100644
+index 0000000..f21ff20
+--- /dev/null
++++ b/COPYING.mit
+@@ -0,0 +1,19 @@
++Copyright (c) 2009, 2018-2019
++
++Permission is hereby granted, free of charge, to any person obtaining a copy
++of this software and associated documentation files (the "Software"), to deal
++in the Software without restriction, including without limitation the rights
++to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++copies of the Software, and to permit persons to whom the Software is
++furnished to do so, subject to the following conditions:
++
++The above copyright notice and this permission notice shall be included in all
++copies or substantial portions of the Software.
++
++THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
++SOFTWARE.

config/patches/gitlab-exporter/add-license-file.patch

+diff --git a/LICENSE b/LICENSE
+new file mode 100644
+index 0000000..4abe8b8
+--- /dev/null
++++ b/LICENSE
+@@ -0,0 +1,25 @@
++Copyright (c) 2011-2017 GitLab B.V.
++
++With regard to the GitLab Software:
++
++Permission is hereby granted, free of charge, to any person obtaining a copy
++of this software and associated documentation files (the "Software"), to deal
++in the Software without restriction, including without limitation the rights
++to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
++copies of the Software, and to permit persons to whom the Software is
++furnished to do so, subject to the following conditions:
++
++The above copyright notice and this permission notice shall be included in
++all copies or substantial portions of the Software.
++
++THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
++IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
++FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
++AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
++LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
++OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
++THE SOFTWARE.
++
++For all third party components incorporated into the GitLab Software, those
++components are licensed under the original license provided by the owner of the
++applicable component.

config/patches/gitlab-rails/backup_restore_hooks.patch

+diff --git a/lib/backup/repository.rb b/lib/backup/repository.rb
+index 20fd5ba..552f7ea 100644
+--- a/lib/backup/repository.rb
++++ b/lib/backup/repository.rb
+@@ -72,8 +72,7 @@ module Backup
+       end
+ 
+       print 'Put GitLab hooks in repositories dirs'.yellow
+-      gitlab_shell_user_home = File.expand_path("~#{Gitlab.config.gitlab_shell.ssh_user}")
+-      if system("#{gitlab_shell_user_home}/gitlab-shell/support/rewrite-hooks.sh", Gitlab.config.gitlab_shell.repos_path)
++      if system("#{Gitlab.config.gitlab_shell.path}/support/rewrite-hooks.sh", Gitlab.config.gitlab_shell.repos_path)
+         puts " [DONE]".green
+       else
+         puts " [FAILED]".red

config/patches/gitlab-rails/security-patch-13.12.patch

+diff --git a/app/models/note.rb b/app/models/note.rb
+index 96977f3c6c3..c3ebd618afd 100644
+--- a/app/models/note.rb
++++ b/app/models/note.rb
+@@ -44,7 +44,7 @@ class Note < ApplicationRecord
+   attr_accessor :user_visible_reference_count
+ 
+   # Attribute used to store the attributes that have been changed by quick actions.
+-  attr_accessor :commands_changes
++  attr_writer :commands_changes
+ 
+   default_value_for :system, false
+ 
+@@ -561,6 +561,41 @@ def skip_notification?
+     review.present? || !author.can_trigger_notifications?
+   end
+ 
++  def commands_changes
++    @commands_changes&.slice(
++      :due_date,
++      :label_ids,
++      :remove_label_ids,
++      :add_label_ids,
++      :canonical_issue_id,
++      :clone_with_notes,
++      :confidential,
++      :create_merge_request,
++      :add_contacts,
++      :remove_contacts,
++      :assignee_ids,
++      :milestone_id,
++      :time_estimate,
++      :spend_time,
++      :discussion_locked,
++      :merge,
++      :rebase,
++      :wip_event,
++      :target_branch,
++      :reviewer_ids,
++      :health_status,
++      :promote_to_epic,
++      :weight,
++      :emoji_award,
++      :todo_event,
++      :subscription_event,
++      :state_event,
++      :title,
++      :tag_message,
++      :tag_name
++    )
++  end
++
+   private
+ 
+   # Using this method followed by a call to *save* may result in *ActiveRecord::RecordNotUnique* exception

config/patches/gitlab-rails/security-patch-14.0.patch

+diff --git a/app/models/note.rb b/app/models/note.rb
+index a76f4170a5b..70df20c0486 100644
+--- a/app/models/note.rb
++++ b/app/models/note.rb
+@@ -44,7 +44,7 @@ class Note < ApplicationRecord
+   attr_accessor :user_visible_reference_count
+ 
+   # Attribute used to store the attributes that have been changed by quick actions.
+-  attr_accessor :commands_changes
++  attr_writer :commands_changes
+ 
+   default_value_for :system, false
+ 
+@@ -569,6 +569,41 @@ def skip_notification?
+     review.present? || !author.can_trigger_notifications?
+   end
+ 
++  def commands_changes
++    @commands_changes&.slice(
++      :due_date,
++      :label_ids,
++      :remove_label_ids,
++      :add_label_ids,
++      :canonical_issue_id,
++      :clone_with_notes,
++      :confidential,
++      :create_merge_request,
++      :add_contacts,
++      :remove_contacts,
++      :assignee_ids,
++      :milestone_id,
++      :time_estimate,
++      :spend_time,
++      :discussion_locked,
++      :merge,
++      :rebase,
++      :wip_event,
++      :target_branch,
++      :reviewer_ids,
++      :health_status,
++      :promote_to_epic,
++      :weight,
++      :emoji_award,
++      :todo_event,
++      :subscription_event,
++      :state_event,
++      :title,
++      :tag_message,
++      :tag_name
++    )
++  end
++
+   private
+ 
+   # Using this method followed by a call to *save* may result in *ActiveRecord::RecordNotUnique* exception