Gitea

Table of Contents

Pre-Setup

Create a gitea user

useradd -m git
mkdir /etc/gitea
chown git:git -R /etc/gitea

Create the .ssh directory for the git user

sudo -u git mkdir -p /home/git/.ssh

Get the user id of git with id git

Podman

Network and Pod

podman network create net_gitea
podman pod create --name pod_gitea --network net_gitea -p 127.0.0.1:5432:5432 -p 3000:3000 -p 127.0.0.1:2222:22

Port Mappings

5432 (localhost): Postgres Database
3000: Gitea WebUI
2222 (localhost): Gitea SSH

Database

podman run --name giteadb \
    -e PGDATA=/var/lib/postgresql/data/pgdata \
    -e POSTGRES_USER=gitea \
    -e POSTGRES_PASSWORD=gitea \
    -e POSTGRES_DB=gitea \
    -v /mnt/postgres:/var/lib/postgresql/data \
    --pod pod_gitea \
    -d docker.io/postgres:14

Application

podman run --name gitea \
    -e USER_UID=[UID] \
    -e USER_GID=[GID] \
    -e GITEA__database__DB_TYPE=postgres \
    -e GITEA__database__HOST=giteadb:5432 \
    -e GITEA__database__NAME=gitea \
    -e GITEA__database__USER=gitea \
    -e GITEA__database__PASSWD=gitea \
    -v /mnt/gitea:/data \
    -v /home/git/.ssh/:/data/git/.ssh \
    -v /etc/timezone:/etc/timezone:ro \
    -v /etc/localtime:/etc/localtime:ro \
    --pod pod_gitea \
    -d docker.io/gitea/gitea:latest

NOTE: gitea's /data directory must not contain permissions too open. Otherwise the SSH redirection set up below will fail.
0750 for directories and 0640 is known to work.

The next few lines are used to set up ssh-redirection to gitea if it is used to clone a repo.

See also the official documentation

Create SSH Keys for gitea

sudo -u git ssh-keygen -t rsa -b 4096 -C "Gitea Host Key"
sudo -u git cat /home/git/.ssh/id_rsa.pub | sudo -u git tee -a /home/git/.ssh/authorized_keys
sudo -u git chmod 600 /home/git/.ssh/authorized_keys

cat <<"EOF" | sudo tee /usr/local/bin/gitea
#!/bin/sh
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
EOF

chmod +x /usr/local/bin/gitea

We've now finished setting up the ssh-redirection.
After that, connect to the Server on port 3000 to finish the installation
The first registered user will be made admin

Management CLI

Gitea comes with a management cli. To access it, change into the Container first and su into the user "git".

podman exec -it gitea bash
su git

User Management

List users:

gitea admin user list

Change user password:

gitea admin user change-password -u [USER] -p [PASSWORD]

Package Management

Container Registry

Gitea comes with a built-in container registry.

Login

podman login gitea.exu.li

Push image

podman push [IMAGE ID] docker://gitea.exu.li/[OWNER]/[IMAGE]:[TAG]