Make GitLab use host-mode networking

This cuts some complexity while also getting rid of the Docker userspace proxy which is slow compared to kernelspace routing. It also allows us to make GitLab consume a second IP for GitLab Pages without too much fuckery.

The changes are already applied.

Reviewers should check:

  • That all required ports now exist properly directly on the interface.
  • That no undesired ports are exposed to the outside (check nmap vs. firewall config).
  • That registry, ssh and normal web things still work via IPv4 and IPv6.
Edited by Frederik Schwan

Merge request reports

Loading