Skip to content
Snippets Groups Projects
Commit 8df4baabd076 authored by Balasankar "Balu" C's avatar Balasankar "Balu" C
Browse files

Add docs about automatic initial password generation


Signed-off-by: default avatarBalasankar "Balu" C <balasankar@gitlab.com>
parent 84882e071b7b
No related branches found
No related tags found
2 merge requests!51Validate shift of Heptapod 0.25 to oldstable series,!44GitLab 14.0
......@@ -43,6 +43,40 @@
Set up the Prometheus monitoring included in the Omnibus GitLab package.
- [GitLab High Availability Roles](../roles/README.md).
### Set up the initial password
> [Introduced](https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5331) in Omnibus GitLab 14.0.
By default, Omnibus GitLab automatically generates a password for the
initial administrator user account (`root`) and stores it to
`/etc/gitlab/initial_root_password` for at least 24 hours. For security reasons,
after 24 hours, this file is automatically removed by the first `gitlab-ctl reconfigure`.
NOTE:
If GitLab can't detect a valid hostname for the server during the
installation, a reconfigure will not run.
To provide a custom initial root password, you have two options:
- Pass the `GITLAB_ROOT_PASSWORD` environment variable to the
[installation command](https://about.gitlab.com/install/) provided
the hostname for the server is set up correctly.
If during the installation GitLab doesn't automatically perform a
reconfigure, you have to pass the `GITLAB_ROOT_PASSWORD` variable to the
first `gitlab-ctl reconfigure` run.
- Before the first reconfigure, edit `/etc/gitlab/gitlab.rb` (create it if it
doesn't exist) and set:
```ruby
gitlab_rails['initial_root_password'] = '<my_strong_password>'
```
Both of these methods apply only during the initial database seeding, which happens
during the first reconfigure. For subsequent reconfigure runs, neither of
the aforementioned methods will have any effect. In that case, use the random
password in `/etc/gitlab/initial_root_password` to log in, or
[reset the root password](https://docs.gitlab.com/ee/security/reset_user_password.html).
## Using Docker image
You can also use the Docker images provided by GitLab to install and configure a GitLab instance.
......
......@@ -48,3 +48,10 @@
that Consul nodes be upgraded and restarted one at a time.
See our [Consul upgrade instructions](https://docs.gitlab.com/ee/administration/consul.html#upgrade-the-consul-nodes).
### Automatically generating an initial root password
Starting with GitLab 14.0, GitLab automatically generates a password for initial
administrator user (`root`) and stores this value to
`/etc/gitlab/initial_root_password`. For details, see the
[documentation on initial login](../installation/index.md#set-up-the-initial-password).
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment