Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Data Sovereignty and Source Code Control
- Risks associated with cloud-based Git hosting regarding proprietary information and sensitive intellectual property.
- Architectural analysis of Gitea in comparison to GitHub, GitLab, and Forgejo, emphasizing governance capabilities.
- Evaluating licensing frameworks, terms of service, and data export protocols for federal compliance.
Deployment and System Configuration
- Containerized deployment via Docker Compose utilizing PostgreSQL and Redis components.
- Native binary installation on Linux environments with systemd service integration.
- Configuration of reverse proxies, Transport Layer Security (TLS), and Secure Shell (SSH) ports.
- Execution of the initial setup wizard to configure database connections, administrative credentials, and application parameters for government use cases.
Repository Administration
- Establishment of organizational structures, team permissions, and repository inventories.
- Implementation of branch protection rules, mandatory peer reviews, and cryptographic commit verification.
- Utilization of issue tracking systems, labeling conventions, milestone management, and Kanban methodologies.
- Management of technical documentation wikis and release artifact distribution.
Automated Workflows via Gitea Actions
- Activation of Gitea Actions and registration of act-based runners for continuous integration.
- Development of workflow definitions to automate build, test, and deployment stages.
- Security protocols for self-hosted runners and container isolation standards.
- Implementation of artifact caching strategies and matrix build configurations.
Transition from Commercial Platforms
- Repository mirroring and data import procedures from GitHub and GitLab environments.
- Transfer of historical issues, pull requests, and release documentation during migration.
- Preservation of cryptographic commit signatures and GPG key trust chains.
Identity Management and Access Control
- Integration with Lightweight Directory Access Protocol (LDAP), Active Directory, and OpenID Connect providers.
- Enforcement of multi-factor authentication and management of deployment tokens.
- Definition of repository visibility scopes: public, internal, and private classifications.
Security Standards and Compliance
- Mandatory enforcement of GPG and SSH key-based commit signing.
- Comprehensive audit logging for repository access events and administrative modifications.
- Integration with dependency scanning tools and vulnerability webhook alerting systems.
Operational Maintenance and Scalability
- Development of backup strategies for Git data stores, issue records, and associated attachments.
- Database performance optimization and offloading of large attachments to object storage solutions (e.g., S3).
- Procedures for system upgrades and management of potential breaking changes.
Requirements
- Prerequisites
- Proficiency in intermediate Git commands and version control methodologies; expertise in Linux server administration, specifically regarding containerization technologies such as Docker; and working knowledge of continuous integration and deployment (CI/CD) workflows along with webhook configuration.
- Target Audience
- This guidance is intended for development entities transitioning from commercial platforms like GitHub or GitLab.com to self-hosted solutions. It addresses organizations that mandate local custody of source code assets, including government agencies and defense contractors subject to strict data export controls and requirements for specialized hosting infrastructure for government applications.
14 Hours
Testimonials (2)
I like that I've got immediately answer to my questions.
Szabolcs Kriston - Ericsson
Course - Advanced GitLab
I liked the easy communication between trainer and us, care given to our problems, insights and additional knowledge provided in anwers to our questions. I liked the pace, it didn't feel rushed at any point, even with technical problems. Each subject was taken care of properly.
