Jenkins+harbor+nexus+docker+k8s

Jenkins执行流水线脚本命令

harbor维护管理docker镜像

nexus维护私有maven依赖

docker创建服务各个版本的docker镜像

k8s部署服务镜像

后端：

Jenkins流水线脚本

pipeline {
    agent none
    environment {
        FLAG = 'ruoyigatewaydev'
    }
    options {
        timeout(time:25, unit: 'MINUTES')
    }
    stages {
        stage('Build Package') {
            agent {
                docker {
                    image 'maven:3.6.1-jdk-8'
                    args '-v /var/lib/jenkins/repository:/repository '
                }
            }
            steps {
                git branch: 'dev',
                        credentialsId: 'gitlab_local_pwd',
                        url: 'http://git_ip:git_port/lhy/ruoyi-gateway.git'
                sh '''
                mvn -s settings.xml -Dmaven.repo.local=/repository -B clean package -DskipTests=true
                '''
            }
        }
        stage('Build image and Push') {
            agent any
            environment {
                IMAGE_TAG = sh(returnStdout: true,script: 'echo $image_tag').trim()
            }
            steps {
                sh """	
					docker build -t harbor_ip:harbor_port/public/${FLAG}:${IMAGE_TAG} ./
					docker push harbor_ip:harbor_port/public/${FLAG}:${IMAGE_TAG}
					docker image rm harbor_ip:harbor_port/public/${FLAG}:${IMAGE_TAG}
                   """
            }
        }

        stage('Deploy') {
            agent any
            steps {
                script{
                    def remote = [:]
                    remote.name = 'kube'
                    remote.host = 'k8s_ip'
                    remote.port = 22
                    remote.allowAnyHosts = true
                    //通过withCredentials调用Jenkins凭据中已保存的凭据，credentialsId需要填写，其他保持默认即可
                    withCredentials([usernamePassword(credentialsId: 'Vm_local_pwd', passwordVariable: 'password', usernameVariable: 'userName')]) {
                        remote.user = "${userName}"
                        remote.password = "${password}"
                    }
                    sshCommand remote: remote, command: """ 
                        if [ ! -d '/home/ruoyi/${FLAG}' ];then 
                        mkdir /home/ruoyi/${FLAG}
                        else
                        echo "文件夹已经存在"
                        fi
    				   """
                    sshPut remote: remote, from: 'k8s.yaml', into: "/home/ruoyi/${FLAG}"
                    sshCommand remote: remote, command: """ 
    					sed -i 's#${FLAG}:.*#${FLAG}:${IMAGE_TAG}#g' /home/ruoyi/${FLAG}/k8s.yaml
    					kubectl apply -f /home/ruoyi/${FLAG}/k8s.yaml
    					rm -rf /home/ruoyi/${FLAG}/k8s.yaml
    				   """
                }
            }
        }
    }
}

k8s.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: ruoyigateway
  namespace: ruoyi-dev
  labels:
    app: ruoyigateway
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ruoyigateway
  template:
    metadata:
      name: ruoyigateway
      labels:
        app: ruoyigateway
    spec:
      containers:
        - name: ruoyigateway
          image: harbor_ip:harbor_port/public/ruoyigatewaydev:7.0
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: containerPort
              protocol: TCP
      restartPolicy: Always
      imagePullSecrets:
        - name: harbor-lhy

---
apiVersion: v1
kind: Service
metadata:
  name: ruoyigateway
  namespace: ruoyi-dev
spec:
  selector:
    app: ruoyigateway
  ports:
    - protocol: TCP
      port: port
      targetPort: targetPort
      nodePort: nodePort
  type: NodePort

DockerFile

FROM openjdk:8-jre
LABEL authors="lhyshome_pc"
ADD target/ruoyi-gateway.jar app.jar
ENTRYPOINT ["java","-jar","/app.jar"]

前端

Jenkins流水线脚本

pipeline {
    agent none
    environment {
        FLAG = 'ruoyiuidev'
    }
    options {
        timeout(time:25, unit: 'MINUTES')
    }
    stages {
        stage('npm') {
            agent {
                docker {
                    image 'node:14'
                    args '-u root:root --network=host'
                }
            }
            steps {
                git branch: 'dev',
                credentialsId: 'gitlab_local_pwd',
                url: 'http://git_ip:git_port/lhy/ruoyi-ui.git'
                sh """
                    npm install && npm run build:stage
                """
            }
        }
        stage('Build image and Push') {
            agent any
            environment {
                IMAGE_TAG = sh(returnStdout: true,script: 'echo $image_tag').trim()
            }
            steps {
                sh """	
					docker build -t harbor_ip:harbor_port/public/${FLAG}:${IMAGE_TAG} ./
					docker push harbor_ip:harbor_port/public/${FLAG}:${IMAGE_TAG}
					docker image rm harbor_ip:harbor_port/public/${FLAG}:${IMAGE_TAG}
                   """
            }
        }
        stage('Deploy') {
            agent any
            steps {
                script{
                    def remote = [:]
                    remote.name = 'kube'
                    remote.host = 'k8s_ip'
                    remote.port = 22
                    remote.allowAnyHosts = true
                    //通过withCredentials调用Jenkins凭据中已保存的凭据，credentialsId需要填写，其他保持默认即可
                    withCredentials([usernamePassword(credentialsId: 'Vm_local_pwd', passwordVariable: 'password', usernameVariable: 'userName')]) {
                        remote.user = "${userName}"
                        remote.password = "${password}"
                    }
                    sshCommand remote: remote, command: """ 
                        if [ ! -d '/home/ruoyi/${FLAG}' ];then 
                        mkdir /home/ruoyi/${FLAG}
                        else
                        echo "文件夹已经存在"
                        fi
    				   """
                    sshPut remote: remote, from: 'k8s.yaml', into: "/home/ruoyi/${FLAG}"
                    sshCommand remote: remote, command: """ 
    					sed -i 's#${FLAG}:.*#${FLAG}:${IMAGE_TAG}#g' /home/ruoyi/${FLAG}/k8s.yaml
    					kubectl apply -f /home/ruoyi/${FLAG}/k8s.yaml
    					rm -rf /home/ruoyi/${FLAG}/k8s.yaml
    				   """
                }
            }
        }
    }
}

k8s.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: ruoyiui
  namespace: ruoyi-dev
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ruoyiui
  template:
    metadata:
      labels:
        app: ruoyiui
    spec:
      containers:
        - name: ruoyiui
          image: harbor_ip:harbor_port/public/ruoyiuiprod:9.0
          ports:
            - containerPort: containerPort
---
apiVersion: v1
kind: Service
metadata:
  name: ruoyiui
  namespace: ruoyi-dev
spec:
  type: LoadBalancer
  selector:
    app: ruoyiui
  ports:
    - protocol: TCP
      port: port
      targetPort: targetPort
      nodePort: nodePort

DockerFile

FROM nginx:1.14.1
ADD ./dist /home
ADD ./nginx.conf /etc/nginx
EXPOSE 80
CMD ["nginx", "-g", "daemon off;"]

nginx.conf

worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;

    server {
        listen       80;
        server_name  localhost;

        location / {
            root   /home;
            try_files $uri $uri/ /index.html;
            index  index.html index.htm;
        }

        # 避免actuator暴露
        if ($request_uri ~ "/actuator") {
            return 403;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}

-d # 指定容器在后台运行
-p {a}:{b} # 端口映射，a宿主机使用端口，b容器内使用端口 e.g.： -p 80:80
-v {xxxx}:{yyyy} # 文件目录映射 xxxx宿主机目录，yyyy容器内目录 e.g.： -v /usr/local/mysql/log:/var/log/mysql
-e {key}={value} # 设置应用的环境变量 环境变量来源于应用所设 e.g.： -e RABBITMQ_DEFAULT_USER=user 将环境变量"RABBITMQ_DEFAULT_USER"设置为"user"
--restart=always # 开机启动 
--name  # 指定了容器名称 e.g.： --name redis 将容器命名为"redis"
--hostname # 指定主机名
--rm #表示退出容器时会自动将其删除
--privileged=true #在容器内获取root权限

常用命令

docker exec -it {name} /bin/bash  # 进入容器 "name" 为容器名称或容器id
docker cp /usr/local/vendor.js  {containerId}:/usr/src/app/_site  # 将文件复制到容器

Jenkins

docker run --restart=always  -u root   -d   -p 8080:8080   -p 50000:50000   -v jenkins-data:/var/jenkins_home   -v /var/run/docker.sock:/var/run/docker.sock   --name jenkins   jenkinsci/blueocean

2024/12/23
docker run --restart=always  -u root   -d   -p 8080:8080   -p 50000:50000   -v jenkins-data:/var/jenkins_home   -v /var/run/docker.sock:/var/run/docker.sock   --name jenkins2   jenkins/jenkins:2.426.1
# 进入容器命令行
apt-get update
apt-get install -y docker.io
docker login -u {username} -p {password} {harbor}

redis

docker run -p 6379:6379 --name redis --restart=always -d redis

mysql

docker run -p 3306:3306 --name mysql --restart=always --privileged=true -v /usr/local/mysql/log:/var/log/mysql -v /usr/local/mysql/data:/var/lib/mysql -v /usr/local/mysql/conf:/etc/mysql/conf.d -v /etc/localtime:/etc/localtime:ro -e MYSQL_ROOT_PASSWORD={PASSWORD} -d mysql:latest

gitlab

docker run  -itd   -p 80:80  -p 22:22  -p 443:443  -v /home/gitlab/etc:/etc/gitlab   -v /home/gitlab/log:/var/log/gitlab  -v /home/gitlab/opt:/var/opt/gitlab  --restart always  --privileged=true  --name gitlab  gitlab/gitlab-ce:15.11.13-ce.0
# 初始密码
cat /home/gitlab/initial_root_password

rabbitMq

# 15672--web页面地址 5672--应用连接端口
docker run -d -p 15672:15672 -p 5672:5672 -e RABBITMQ_DEFAULT_USER=user -e RABBITMQ_DEFAULT_PASS={PASSWORD} --restart=always --name rabbitmq rabbitmq:management 

nacos（ruoyi）

docker run \
 --name nacos-ruoyi \
 -p 8848:8848 \
 -p 9848:9848 \
 -p 9849:9849 \
 -e MODE=standalone \
 -e SPRING_DATASOURCE_PLATFORM=mysql \
 -e MYSQL_SERVICE_HOST={HOST/IP} \
 -e MYSQL_SERVICE_PORT=3306 \
 -e MYSQL_SERVICE_DB_NAME={DB_NAME} \
 -e MYSQL_SERVICE_USER={USER} \
 -e MYSQL_SERVICE_PASSWORD={PASSWORD} \
 -e MYSQL_SERVICE_DB_PARAM='characterEncoding=utf8&connectTimeout=1000&socketTimeout=3000&autoReconnect=true&useUnicode=true&useSSL=false&serverTimezone=Asia/Shanghai&allowPublicKeyRetrieval=true' \
 --restart=always -d \
 nacos/nacos-server:v2.2.0

ps：上述为mysql 8.* 版本，如果使用mysql 5.7可不添加MYSQL_SERVICE_DB_PARAM参数，使用默认MYSQL_SERVICE_DB_PARAM即可

stirling-pdf

docker run -d \
-p 8080:8080 \
-v /home/stirlingpdf/logs:/logs \
-e DOCKER_ENABLE_SECURITY=false \
-e LANGS=zh_CN \
–name stirling-pdf \
frooodle/s-pdf:0.46.2