Critical Gitlab vulnerability let attackers take over accounts

Re:Critical Gitlab vulnerability let attackers take over acc... by fuzzy2 on Friday April 01, 2022 @04:06PM (#30882721)

I find self-hosting GitLab reasonably enjoyable. I use the Docker image (which contains the omnibus installation). It takes a ridiculous time to boot but I can only remember one time when upgrading wasn't as simple as pulling the new version and re-creating the container. Don't remember what went wrong though.

It's login-only, there's no other users, so I'm not too worried about security.

For anything public I use GitHub.

[ Parent | on HN ]

Re:Critical Gitlab vulnerability let attackers take over acc... by codebje on Friday April 01, 2022 @04:51PM (#30883182)

I've had several upgrade issues. Once several configuration settings were deprecated then removed... Silently. It was difficult to discover why it would no longer start. Another time a bunch of repositories only partially migrated, and appeared empty on clone.

Mostly it's the frequency of updates that's a pain, there are enough critical vulnerabilities that you have to stay on top of it.

I am the dog lying on a nail and occasionally whimpering at the moment though.

[ Parent | on HN ]