Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Source Code Sovereignty and Data Control
- Risks associated with proprietary code exposure and trade secret protection on commercial cloud Git platforms.
- Architectural overview of Gitea and comparative analysis against GitHub, GitLab, and Forgejo.
- Assessment of licensing frameworks, terms of service, and data export protocols for government compliance.
Deployment and System Configuration
- Containerized deployment using Docker Compose with PostgreSQL and Redis services.
- Native binary installation on Linux operating systems with systemd service management.
- Configuration of reverse proxies, TLS encryption, and SSH port security settings.
- Initial configuration wizard procedures, including database setup, administrative account creation, and app.ini optimization.
Repository Governance and Management
- Establishment of organizational structures, team hierarchies, and repository provisioning.
- Implementation of branch protection rules, mandatory peer reviews, and commit signing requirements.
- Management of issue tracking, labeling systems, milestone planning, and Kanban boards.
- Utilization of integrated Wiki and release artifact hosting capabilities.
CI/CD Integration via Gitea Actions
- Activation of Gitea Actions and registration of act runners for build execution.
- Development of workflow YAML files for build, testing, and deployment pipelines.
- Enforcement of security measures for self-hosted runners and container isolation for government environments.
- Optimization of artifact caching strategies and matrix-based build configurations.
Migration from Commercial Cloud Forges
- Execution of repository mirroring and import procedures from GitHub or GitLab.
- Transition of issues, pull requests, and release documentation to the local instance.
- Maintenance of commit signature integrity and GPG key trust chains during migration.
Identity Management and Access Control
- Integration with enterprise identity providers, including LDAP, Active Directory, and OpenID Connect.
- Implementation of two-factor authentication and secure management of deploy tokens.
- Definition of repository visibility scopes, including public, internal, and private access levels.
Security Posture and Regulatory Compliance
- Mandatory enforcement of commit signing using GPG and SSH key pairs.
- Configuration of comprehensive audit logging for repository access and administrative actions.
- Integration of dependency scanning tools and vulnerability webhook alerting mechanisms.
Operational Maintenance and Scalability
- Implementation of robust backup strategies for Git data, issues, and file attachments.
- Database performance optimization and offloading of attachments to S3-compatible storage.
- Management of Gitea version upgrades and mitigation of breaking changes.
Requirements
- Working knowledge of intermediate Git and version control concepts.
- Proficiency in Linux server administration, including Docker containerization.
- Understanding of CI/CD pipeline architectures and webhook mechanisms.
Target Audience
- Development teams transitioning from GitHub or GitLab.com to on-premise solutions.
- Organizations requiring strict custody and control over source code assets.
- Government agencies and defense contractors subject to code export restrictions and data sovereignty mandates for government use.
14 Hours
Testimonials (2)
I like that I've got immediately answer to my questions.
Szabolcs Kriston - Ericsson
Course - Advanced GitLab
I liked the easy communication between trainer and us, care given to our problems, insights and additional knowledge provided in anwers to our questions. I liked the pace, it didn't feel rushed at any point, even with technical problems. Each subject was taken care of properly.
