jenkins配置自动构建部署

基于ssh key 拉取代码

实现jenkins服务器到gitlab服务器的基于密钥的验证，可以让jenkins连接到gitlab执行操作

在jenkins服务上生成 ssh key

#在jenkins服务器上生成密钥对
[root@jenkins-ubunutu1804 ~]#ssh-keygen
[root@jenkins-ubunutu1804 ~]#cat .ssh/id_rsa.pub
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/LAA5tcFrSLye3QE9a+RH8LSYzwewJ4MBSBvVP7pImKMqg21WozWw56RKqiSsj9ewO8zL43yfAwOjetrKr2Ovbxw9bOaxj0r1CobpXsD5H7pS4Cq0lLJxSmFwCLroz1C9ecGhBWBmaCbkOaJ0Q6JLTO830w7noTFYZq4/NWTGtE4xpVDDNUFTAS4j4T/0QQF6YvXIqw0EzdKKkuZLw9Rl9f2j7D1eNJX3QyY2LSgxPsXE77PzlKeJue0FKa0JwzNeKNS01rM9ztoc0VQVhxjOgjY+rhoUtBFYwxXQLmwtBq82dh6qVBKrCDpNIPE+XaXFZVMyZ0Ahs3vD2iIP9Xz/ root@jenkins-ubunutu1804

在gitlab服务器上添加上面生成的ssh key

在jenkins服务器上测试 ssh key

测试可以不使用用户名密码后直接获取代码

先在gitlab查看项目的下载地址：code>git@10.0.0.100:testgroup/testproject.git

在jenkins服务器上执行克隆，不再需要用户和密码

[root@jenkins-ubunutu1804 ~]#git clone git@10.0.0.100:testgroup/testproject.git
Cloning into 'testproject'...
remote: Enumerating objects: 9, done.
remote: Counting objects: 100% (9/9), done.
remote: Compressing objects: 100% (5/5), done.
remote: Total 9 (delta 0), reused 9 (delta 0)
Receiving objects: 100% (9/9), done.
[root@jenkins-ubunutu1804 ~]#ls
testproject
[root@jenkins-ubunutu1804 ~]#tree testproject/
testproject/
├── index.html
└── README.md

0 directories, 2 files
[root@jenkins-ubunutu1804 ~]#

配置jenkins到gitlab非交互式拉取代码

jenkins 服务器添加凭据

Jenkins-凭据-jenkins—全局凭据—添加凭据

复制root的私钥

[root@jenkins-ubunutu1804 ~]#cat .ssh/id_rsa
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

添加私钥

4.3.2 jenkins创建任务

配置git项目地址和用户

添加完成的证书没有报错表示认证通过

测试构建项目

点击立即构建

验证构建结果

服务器验证数据

[root@jenkins-ubunutu1804 ~]#ll -d /var/lib/jenkins/workspace/testproject-test
drwxr-xr-x 3 jenkins jenkins 4096 Mar  7 18:11 /var/lib/jenkins/workspace/testproject-test/
[root@jenkins-ubunutu1804 ~]#ll /var/lib/jenkins/workspace/testproject-test
total 20
drwxr-xr-x 3 jenkins jenkins 4096 Mar  7 18:11 ./
drwxr-xr-x 4 jenkins jenkins 4096 Mar  7 18:11 ../
drwxr-xr-x 8 jenkins jenkins 4096 Mar  7 18:11 .git/
-rw-r--r-- 1 jenkins jenkins   48 Mar  7 18:11 index.html
-rw-r--r-- 1 jenkins jenkins   17 Mar  7 18:11 EADME.md

将代码部署至后端服务器

先和后端服务器实现基于key验证

[root@jenkins-ubunutu1804 ~]#ssh-copy-id 10.0.0.102
[root@jenkins-ubunutu1804 ~]#ssh 10.0.0.102
Last login: Sat Mar  7 18:46:25 2020 from 10.0.0.1
[root@web-ubuntu1804 ~]#exit
logout
Connection to 10.0.0.102 closed.

在后端服务器查看文件是否复制成功

[root@web-ubuntu1804 ~]#ll /var/www/html/
total 20
drwxr-xr-x 2 root root 4096 Mar  7 18:58 ./
drwxr-xr-x 3 root root 4096 Mar  7 16:12 ../
-rw-r--r-- 1 root root   48 Mar  7 18:58 index.html
-rw-r--r-- 1 root root  612 Mar  7 16:12 index.nginx-debian.html
-rw-r--r-- 1 root root   17 Mar  7 18:58 README.md

访问后端服务器页面验证是否成功

范例：针对tomcat后端服输，构建执行shell脚本内容

ssh-copy-id tomcat服务器IP #实现到生产服务器的免密钥认证
cd /var/lib/jenkins/workspace/linux36-job1/ 
tar czvf code.tar.gz index.html 
scp code.tar.gz www@192.168.7.105:/data/tomcat/tomcat_appdir/
scp code.tar.gz www@192.168.7.106:/data/tomcat/tomcat_appdir/
ssh www@192.168.7.105 "/etc/init.d/tomcat stop && rm -rf /data/tomcat/tomcat_webdir/myapp/* && cd /data/tomcat/tomcat_appdir && tar xvf code.tar.gz -C /data/tomcat/tomcat_webdir/myapp/"
ssh www@192.168.7.106 "/etc/init.d/tomcat stop && rm -rf /data/tomcat/tomcat_webdir/myapp/* && cd /data/tomcat/tomcat_appdir && tar xvf code.tar.gz -C /data/tomcat/tomcat_webdir/myapp/"
ssh www@192.168.7.105 "/etc/init.d/tomcat start"
ssh www@192.168.7.106 "/etc/init.d/tomcat start"

更新代码再次构建，查看后端服务器是否能自动更新

#在之前曾经执行git clone的主机上执行下面操作，更新代码
[root@ubuntu1804 ~]#cd /data/testproject/
[root@ubuntu1804 testproject]#vim index.html
[root@ubuntu1804 testproject]#cat index.html
<h1>index.html v1 </h1>
<h1>index.html v2 </h1>
<h1>index.html v3 </h1>
[root@ubuntu1804 testproject]#git add .
[root@ubuntu1804 testproject]#git commit -m v3
[master 36d0b96] v3
 1 file changed, 1 insertion(+)
[root@ubuntu1804 testproject]#git push
Username for 'http://10.0.0.100': wang
Password for 'http://wang@10.0.0.100':
Counting objects: 3, done.
Delta compression using up to 2 threads.
Compressing objects: 100% (3/3), done.
Writing objects: 100% (3/3), 301 bytes | 301.00 KiB/s, done.
Total 3 (delta 0), reused 0 (delta 0)
To http://10.0.0.100/testgroup/testproject.git
   44dbd92..36d0b96  master -> master

[root@ubuntu1804 testproject]#

再次访问后端服务器页面，验证是否成功

本文链接：http://www.yunweipai.com/35768.html