New World gitlab server

1. Host is called nw-syd-gitlab and is in hostlist.csv (cfengine) to reserve the IP address against use by anyone else
2. The IP address is 10.197.85.252. Due to it being in hostlist.csv, there will be an entry for it in /etc/hosts on all cfengine-managed hosts (i.e., login and VLAB servers, lab computers)
3. In AWS, set up the EC2 instance on the sydney-hosts subnetwork with free-for-all security group and 1TB of had disk
4. After first boot, follow Initial setup of a Debian AMI instance
5. Login and set root password
6. Set /etc/hostname with the server name
7. Install the krb5-user package using apt-get and answer:
   • Realm = AD.UNSW.EDU.AU
   • Servers = ad.unsw.edu.au
   • No administration server
8. Add to /etc/dhcp/dhclient.conf (after the main stanza):
   • supersede domain-name-servers 129.94.0.196, 129.94.0.197;
   • supersede domain-search "cse.unsw.edu.au";
   • supersede domain-name "cse.unsw.edu.au";
9. Reboot
10. Check the Kerberos configuration by getting a ticket using zID with kinit, and then kdestroy to get rid of it
11. Run apt-get install ca-certificates perl
12. Follow:
    • https://about.gitlab.com/install/#debian (omit PostFix step for now)
13. Note that gitlab-ee is *not* installed on the AWS instance at time of writing. gitlab-ce, however, is installed.
14. When using the unattended-upgrades package, add the following in /etc/apt/apt.conf.d/50unattended-upgrades, under "Origin-Patterns", to allow unattended updates of gitlab as well as Debian:
    • "origin=packages.gitlab.com/gitlab/gitlab-ce,codename=${distro_codename},label=gitlab-ce"