jenkins CICD 实例 mnc.md

jenkins CI/CD 实例 mnc

提前准备

1. 首先创建 git 仓库，并实现免密登录
2. 注意 git 普通账户免密登录在 .ssh/ 路径下的权限是有要求的

创建 Jenkins 流水线

1. 实现 git 拉取步骤，最总要的就是能够通过 Jenkins 所在服务器的私钥成功ssh访问到 git 仓库的服务器

   

1. 开始编写流水线，其打包镜像、发布镜像、部署镜像的步骤可以使用 sh 脚本完成

def registry = "192.168.102.242"
def project = "mnc"
def app_name = "content_receive"
def image_name = "${registry}/${project}/${app_name}:${BUILD_NUMBER}"

pipeline {
    agent any
    stages {
        stage('pull') {
            steps {
                echo 'git 生成的流水线脚本'
                git credentialsId: '5705f26a-8530-4b00-8173-d46f880c1877', url: '[email protected]:/data/mnc.git'
            }
        }
        stage('Build') {
            steps {
                sh """
                    docker build -f Dockerfile-content_receive -t ${image_name} .
                    docker login -u admin -p 'admin@aq123' ${registry}
                    docker push ${image_name}
                """
            }
        }
        stage('Deploy') {
            steps {
                sh """
                    docker stop ${app_name}-1 ${app_name}-2
                    docker rm ${app_name}-1 ${app_name}-2
                    docker pull ${image_name}
                    docker run --name ${app_name}-1 -itd ${image_name}
                    docker run --name ${app_name}-2 -itd ${image_name}
                """
            }
        }
    }
}

1. 通过引入可变参数实现镜像 tag （变量 BUILD_NUMBER ）的控制

1. 进一步增加安全性，封装 harbor 的用户名密码

def registry = "192.168.102.242"
def project = "mnc"
def app_name = "content_receive"
def image_name = "${registry}/${project}/${app_name}:${BUILD_NUMBER}"

pipeline {
    agent any
    stages {
        stage('pull') {
            steps {
                git credentialsId: '5705f26a-8530-4b00-8173-d46f880c1877', url: '[email protected]:/data/mnc.git'
            }
        }
        stage('Build') {
            steps {
                withCredentials([usernamePassword(credentialsId: 'fd293c01-c390-4997-a87d-7a8a334b8190', passwordVariable: 'p', usernameVariable: 'u')]) {
                sh """
                    docker build -f Dockerfile-content_receive -t ${image_name} .
                    docker login -u ${u} -p '${p}' ${registry}
                    docker push ${image_name}
                """
                }
            }
        }
        stage('Deploy') {
            steps {
                echo 'deploy...'
                sh """
                    docker stop ${app_name}-1 ${app_name}-2
                    docker rm ${app_name}-1 ${app_name}-2
                    docker pull ${image_name}
                    docker run --name ${app_name}-1 -itd ${image_name}
                    docker run --name ${app_name}-2 -itd ${image_name}
                """
            }
        }
    }
}