1 Jenkins設(shè)置
1.1 構(gòu)建maven項目
1、添加git地址
2、添加webhook
此處需要安裝插件Generic Webhook Trigger、GitLab兩個插件才能有此選項。
要記清楚URL因為后面gitlab需要使用此URL。
2 Gitlab設(shè)置
2.1 設(shè)置webhook
此版本的gitlab webhook在
在url上填寫jenkins上的URL
填寫URL及token（由于我的沒做ssh認(rèn)證，所以沒用ssl認(rèn)證）
2.2 測試webhook是否成功
2.3 驗證webhook
測試webhook，并且查看jenkins
Jenkins出現(xiàn)構(gòu)建說明webhook生效，并且構(gòu)建是gitlab的管理員構(gòu)建的。如果出現(xiàn)404、401等報錯請看報錯解決。
3 報錯解決
3.1 jenkins連接git
報錯內(nèi)容：
Failed to connect to repository : Error performing command: git ls-remote -h http://10.10.8.116/ucbms/ucbms.git HEAD
解決辦法：
在jenkins機器上安裝git。說明無git命令?；蛘遟it版本比較低。一般情況下使用yum安裝一個git就可以解決問題。
3.2 webhook本地網(wǎng)絡(luò)限制
報錯內(nèi)容：
Urlis blocked:Requests to the local network are not allowed
解決辦法：
gitlab 10.6 版本以后為了安全，不允許向本地網(wǎng)絡(luò)發(fā)送webhook請求，如果想向本地網(wǎng)絡(luò)發(fā)送webhook請求，則需要使用管理員帳號登錄，默認(rèn)管理員帳號是admin@example.com，密碼就是你gitlab搭建好之后第一次輸入的密碼。
3.3 HTTP 403
報錯內(nèi)容：
Hook executed successfully but returned HTTP 403<html> <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/> <title>Error 403 No valid crumb was included in the request</title> </head> <body><h2>HTTP ERROR 403</h2> <p>Problem accessing /job/eureka-service/build. Reason: <pre> No valid crumb was included in the request</pre></p>
<a href="http://eclipse.org/jetty">Powered by Jetty:// 9.4.z-SNAPSHOT</a>
></body> </html>
解決辦法：
由于Jenkins的安全策略配置了CSRF跨站點保護(hù)。進(jìn)入Jenkins，系統(tǒng)管理-->全局安全配置，勾選匿名用戶具有可讀權(quán)限和去掉CSRF防止跨站點請求偽造：
3.4 HTTP 401
報錯內(nèi)容：
Hook executed successfully but returned HTTP 401 <!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">h1 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:22px;} h2 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:16px;} h3 {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;font-size:14px;} body {font-family:Tahoma,Arial,sans-serif;color:black;background-color:white;} b {font-family:Tahoma,Arial,sans-serif;color:white;background-color:#525D76;} p {font-family:Tahoma,Arial,sans-serif;background:white;color:black;font-size:12px;} a {color:black;} a.name {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> Invalid token</p><p><b>Description</b> The request has not been applied because it lacks valid authentication credentials for the target resource.</p><hr class="line" /><h3>Apache Tomcat/8.5.34</h3></body></html>
解決辦法：
在jenkins上生成密鑰，填寫在gitlab
4 我的jenkins配置
5 腳本
腳本寫在jenkins構(gòu)建shell上編寫
LOG_PATH=/docker/logs/${JOB_NAME}
HARBOR_URL=www.btharbor.com
PROJECT_NAME=bytuetech
#www.btharbor.com/bytuetech/tomcat:8.5.34 的bytuetech
case $Options in
Deploy)
IMAGE_VERSION=`head /root/.jenkins/workspace/${JOB_NAME}/pom.xml |grep '</version>' |awk -F '[<>]' '{print $3}'`
TOMCAT_VERSION=`cat /root/.jenkins/workspace/${JOB_NAME}/Dockerfile/Dockerfile |grep FROM |awk -F '[ :./]+' '{printf $7}'`
# TOMCAT_VERSION=`cat /root/.jenkins/workspace/${JOB_NAME}/Dockerfile/Dockerfile |grep FROM |awk -F '[ :.]+' '{printf $3}'`
mkdir -p ${LOG_PATH}
mkdir -p /root/project
cd /root/project
cp -rp /root/.jenkins/workspace/${JOB_NAME}/target/${JOB_NAME}.war .
cp -rp /root/.jenkins/workspace/${JOB_NAME}/Dockerfile/${JOB_NAME}.xml .
cp -rp /root/.jenkins/workspace/${JOB_NAME}/Dockerfile/Dockerfile .
docker build -t ${HARBOR_URL}/${PROJECT_NAME}/${JOB_NAME}:${IMAGE_VERSION} .
docker login --username=admin -p 12345 ${HARBOR_URL}
docker push ${HARBOR_URL}/${PROJECT_NAME}/${JOB_NAME}:${IMAGE_VERSION}
docker rmi -f ${HARBOR_URL}/${PROJECT_NAME}/${JOB_NAME}:${IMAGE_VERSION}
rm -f ./${JOB_NAME}.war
rm -f ./${JOB_NAME}.xml
rm -f ./Dockerfile
#ansible
#刪除同名docker容器
docker_id=$(docker ps | grep "${JOB_NAME}" | awk '{print $1}')
if [ "${docker_id}" != "" ]; then
docker rm -f ${docker_id}
fi
docker login --username=admin -p 12345 ${HARBOR_URL}
# docker pull ${HARBOR_URL}/${PROJECT_NAME}/${JOB_NAME}:${IMAGE_VERSION}
docker run -itd -p 8888:8080 --name ${JOB_NAME}-${IMAGE_VERSION} -v ${LOG_PATH}:/opt/tomcat/logs ${HARBOR_URL}/${PROJECT_NAME}/${JOB_NAME}:${IMAGE_VERSION}
;;
RollBack)
docker_id=$(docker ps | grep "${JOB_NAME}" | awk '{print $1}')
if [ "${docker_id}" != "" ]; then
docker rm -f ${docker_id}
fi
docker run -itd -p 8888:8080 --name ${JOB_NAME}-${Jobs_Version} -v ${LOG_PATH}:/opt/tomcat/logs ${HARBOR_URL}/${PROJECT_NAME}/${JOB_NAME}:${Jobs_Version}
;;
esac
6 Dockerfile
Dockerfile要在源碼的dockerfile目錄內(nèi)
FROM www.btharbor.com/bytuetech/tomcat:8.5.34
RUN mkdir -p /opt/tomcat/conf/Catalina/localhost/
COPY ./ucbms.war /data/webapps/
COPY ./ucbms.xml /opt/tomcat/conf/Catalina/localhost/
EXPOSE 8080
ENTRYPOINT ["/opt/tomcat/bin/catalina.sh", "run" ]
7 .xml
和dockerfile在一個目錄上
