【Jenkins】持续集成和部署

以你之姓@ 2023-09-29 21:28 3阅读 0赞

## 1.生成安全证书，放到/usr/local/jenkins/data里面 ##

mkdir -p /opt/cert/docker
    cd /opt/cert/docker
     
    #逐行执行下面的脚本($HOST替换成你的域名)
    openssl genrsa -aes256 -out ca-key.pem 4096
    openssl req -new -x509 -days 365 -key ca-key.pem -sha256 -out ca.pem
    openssl genrsa -out server-key.pem 4096
    openssl req -subj "/CN=$HOST" -sha256 -new -key server-key.pem -out server.csr
    # 配置白名单，推荐配置0.0.0.0，允许所有IP连接但只有证书才可以连接成功
    echo subjectAltName = DNS:$HOST,IP:0.0.0.0 > extfile.cnf
    openssl x509 -req -days 365 -sha256 -in server.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out server-cert.pem -extfile extfile.cnf
    openssl genrsa -out key.pem 4096
    openssl req -subj '/CN=client' -new -key key.pem -out client.csr
    echo extendedKeyUsage = clientAuth > extfile.cnf
    openssl x509 -req -days 365 -sha256 -in client.csr -CA ca.pem -CAkey ca-key.pem -CAcreateserial -out cert.pem -extfile extfile.cnf
    rm -v client.csr server.csr
    chmod -v 0400 ca-key.pem key.pem server-key.pem
    chmod -v 0444 ca.pem server-cert.pem cert.pem

## 2.安装docker ##

apt update
    apt install docker.io

## 3.修改配置 ##

vi /usr/lib/systemd/system/docker.service
    # 注释掉其中的ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
    # 添加如下
    ExecStart=/usr/bin/dockerd \
    --tlsverify --tlscacert=/opt/cert/docker/ca.pem  \
    --tlscert=/opt/cert/docker/server-cert.pem \
    --tlskey=/opt/cert/docker/server-key.pem \
    -H tcp://0.0.0.0:2375 -H unix://var/run/docker.sock
     
    # 重启docker
    systemctl daemon-reload && systemctl restart docker
     
    # 测试2375端口，直接访问报错
    curl https://域名:2375/info
    # 指定证书访问成功
    curl --insecure https://域名:2375/info --cert /opt/cert/docker/cert.pem --key /opt/cert/docker/key.pem --cacert /opt/cert/docker/ca.pem

## 4.安装gogs ##

docker pull gogs/gogs
    docker run -d -p 10022:22 -p 3000:3000 --name=gogs --restart=always gogs/gogs

**3000端口访问：**

![24f07b47642c521833a7033935f1350d.png][]

**localhost换成公网ip:**

![014f933f217831c082e18890558b63c9.png][]

**接着登录注册、上传仓库：**

![3f9035352e5442cc2b374cfa656cb895.png][]

## 5.安装jenkins ##

mkdir -p /usr/local/jenkins/data
    chmod -R a+w /usr/local/jenkins/data/
    docker pull jenkins/jenkins
    docker run --privileged=true -u=root -itd --name jenkins -v /usr/local/jenkins/data:/var/jenkins_home/ -p 8080:8080 -p 50000:50000 --restart=always jenkins/jenkins

![9c6c7187cbf52a55a07e040ec2368435.png][]

docker logs jenkins
    # 输入密码

## 6.安装java和maven ##

![8b26e1a4d3df24452fedb261d8e6a2bd.png][]

# ca.pem cert.pem key.pem也移到这里来

![afcb9895b941f5b4b9a72f425668ddd0.png][]

![4c520bdbfef2e4008d0b09ee8a2aecb5.png][]

![e82ae1156bae27369a195b0fcaea17f2.png][]

## 7.配置jenkins（这块非常难） ##

先添加插件publish over ssh，不会可以百度，很简单。

**1.项目根目录添加jenkins.sh**

#!/bin/bash
        if docker ps | grep gateway; then
            docker stop gateway
            docker rm gateway
            docker rmi flow/gateway:latest
        fi
        if docker ps | grep auth; then
            docker stop auth
            docker rm auth
            docker rmi flow/auth:latest
        fi
        if docker ps | grep video; then
            docker stop video
            docker rm video
            docker rmi flow/video:latest
        fi
        if docker ps | grep userinfo; then
            docker stop userinfo
            docker rm userinfo
            docker rmi flow/userinfo:latest
        fi
        if docker ps | grep comment; then
            docker stop comment
            docker rm comment
            docker rmi flow/comment:latest
        fi

![60f038380f53ac3207a0ecafff83c9c4.png][]

**2.安装插件Publish Over SSH并全局配置**

![7ff1baa0c859d59bb9f5ce831eadb7bf.png][]

![3bac09b95023ea9a22434f1600f2b5e9.png][]

**3.第一步当然是拷贝jenkins.sh到根目录下，并执行，目的是清除镜像和容器**

![98622f3c4878957118115bbd91bab38e.png][]

**4.执行打包镜像的命令**

![e8e40e324637a3a4d1eda09e6cb6912a.png][]

4.2023.4.3修改如下

mvn clean install
    echo "开始构建Las Vegas的微服务群"
    cd gateway
    mvn docker:build
    cd ../auth
    mvn docker:build
    cd ../video
    mvn docker:build
    cd ../userInfo
    mvn docker:build
    cd ../comment
    mvn docker:build
    echo "Las Vegas的微服务群构建完毕！"
    cd ..
    echo "开始更改文件"
    cd gateway
    sed -i 's/alexmisko.com/cl.alexmisko.com/g' pom.xml
    sed -i 's#jenkins_home#jenkins_home/cert#g' pom.xml
    cd src/main/resources
    sed -i '0,/66\.187\.4\.234/s//38.34.245.48/' application.yml
    cd ../../../../auth
    sed -i 's/alexmisko.com/cl.alexmisko.com/g' pom.xml
    sed -i 's#jenkins_home#jenkins_home/cert#g' pom.xml
    cd src/main/resources
    sed -i '0,/66\.187\.4\.234/s//38.34.245.48/' application.yml
    cd ../../../../video
    sed -i 's/alexmisko.com/cl.alexmisko.com/g' pom.xml
    sed -i 's#jenkins_home#jenkins_home/cert#g' pom.xml
    cd src/main/resources
    sed -i '0,/66\.187\.4\.234/s//38.34.245.48/' application.yml
    cd ../../../../userInfo
    sed -i 's/alexmisko.com/cl.alexmisko.com/g' pom.xml
    sed -i 's#jenkins_home#jenkins_home/cert#g' pom.xml
    cd src/main/resources
    sed -i '0,/66\.187\.4\.234/s//38.34.245.48/' application.yml
    cd ../../../../comment
    sed -i 's/alexmisko.com/cl.alexmisko.com/g' pom.xml
    sed -i 's#jenkins_home#jenkins_home/cert#g' pom.xml
    cd src/main/resources
    sed -i '0,/66\.187\.4\.234/s//38.34.245.48/' application.yml
    echo "更改文件完毕"
    cd ../../../../
    mvn clean install
    echo "开始构建HK的微服务群"
    cd gateway
    mvn docker:build
    cd ../auth
    mvn docker:build
    cd ../video
    mvn docker:build
    cd ../userInfo
    mvn docker:build
    cd ../comment
    mvn docker:build
    echo "HK的微服务群构建完毕！"

**5.运行镜像为容器**

![0874043cf2a5d6feb976c05a9bd63080.png][]

5.2023.4.3增加香港机器

![8f08c663615bc9dcaed010d475e7165d.png][]

**6.贴个图**

![2438344794c91971eaa3aa050a83ca4a.png][]

## 结语： ##

## 人生就是一场Mortal Combat，不服？Fight！ ##

![c9ae1c63d154b2c82b5cbf16b9d89884.png][]

[24f07b47642c521833a7033935f1350d.png]: https://img-blog.csdnimg.cn/img_convert/24f07b47642c521833a7033935f1350d.png
[014f933f217831c082e18890558b63c9.png]: https://img-blog.csdnimg.cn/img_convert/014f933f217831c082e18890558b63c9.png
[3f9035352e5442cc2b374cfa656cb895.png]: https://img-blog.csdnimg.cn/img_convert/3f9035352e5442cc2b374cfa656cb895.png
[9c6c7187cbf52a55a07e040ec2368435.png]: https://img-blog.csdnimg.cn/img_convert/9c6c7187cbf52a55a07e040ec2368435.png
[8b26e1a4d3df24452fedb261d8e6a2bd.png]: https://img-blog.csdnimg.cn/img_convert/8b26e1a4d3df24452fedb261d8e6a2bd.png
[afcb9895b941f5b4b9a72f425668ddd0.png]: https://img-blog.csdnimg.cn/img_convert/afcb9895b941f5b4b9a72f425668ddd0.png
[4c520bdbfef2e4008d0b09ee8a2aecb5.png]: https://img-blog.csdnimg.cn/img_convert/4c520bdbfef2e4008d0b09ee8a2aecb5.png
[e82ae1156bae27369a195b0fcaea17f2.png]: https://img-blog.csdnimg.cn/img_convert/e82ae1156bae27369a195b0fcaea17f2.png
[60f038380f53ac3207a0ecafff83c9c4.png]: https://img-blog.csdnimg.cn/img_convert/60f038380f53ac3207a0ecafff83c9c4.png
[7ff1baa0c859d59bb9f5ce831eadb7bf.png]: https://img-blog.csdnimg.cn/img_convert/7ff1baa0c859d59bb9f5ce831eadb7bf.png
[3bac09b95023ea9a22434f1600f2b5e9.png]: https://img-blog.csdnimg.cn/img_convert/3bac09b95023ea9a22434f1600f2b5e9.png
[98622f3c4878957118115bbd91bab38e.png]: https://img-blog.csdnimg.cn/img_convert/98622f3c4878957118115bbd91bab38e.png
[e8e40e324637a3a4d1eda09e6cb6912a.png]: https://img-blog.csdnimg.cn/img_convert/e8e40e324637a3a4d1eda09e6cb6912a.png
[0874043cf2a5d6feb976c05a9bd63080.png]: https://img-blog.csdnimg.cn/img_convert/0874043cf2a5d6feb976c05a9bd63080.png
[8f08c663615bc9dcaed010d475e7165d.png]: https://img-blog.csdnimg.cn/img_convert/8f08c663615bc9dcaed010d475e7165d.png
[2438344794c91971eaa3aa050a83ca4a.png]: https://img-blog.csdnimg.cn/img_convert/2438344794c91971eaa3aa050a83ca4a.png
[c9ae1c63d154b2c82b5cbf16b9d89884.png]: https://img-blog.csdnimg.cn/img_convert/c9ae1c63d154b2c82b5cbf16b9d89884.png