jenkins的应用与搭建

实验条件2个服务器，

git服务器　　ip地址：192.168.200.151

Jenkins服务器 ip地址：192.168.200.132

操作系统：centos7.5

[root@git ~]# cat /etc/redhat-release 
CentOS Linux release 7.5.1804 (Core) 
[root@git ~]# uname -r
3.10.0-862.el7.x86_64
[root@git ~]# systemctl stop firewalld
[root@git ~]# systemctl disable firewalld
[root@git ~]# systemctl stop NetworkManager
[root@git ~]# systemctl disable NetworkManager
[root@git ~]# 

在git服务器上操作

[root@git ~]# yum -y install git

[root@git ~]# useradd git
[root@git ~]# echo "12341234" | passwd --stdin git
Changing password for user git.
passwd: all authentication tokens updated successfully.

用git账号创建项目仓库

[root@git ~]# su - git
[git@git ~]$ mkdir repos
[git@git ~]$ cd repos/
[git@git repos]$ mkdir app.git
[git@git repos]$ cd app.git/
[git@git app.git]$ pwd
/home/git/repos/app.git
[git@git app.git]$ git --bare init
Initialized empty Git repository in /home/git/repos/app.git/
[git@git app.git]$ ls 
branches  config  description  HEAD  hooks  info  objects  refs
[git@git app.git]$ 

在Jenkins服务器上测试推送代码

[root@jenkins ~]# yum -y install git
[root@jenkins ~]# mkdir -p /test
[root@jenkins ~]# cd /test

[root@jenkins test]# git clone git@192.168.200.151:/home/git/repos/app.git
Cloning into 'app'...
The authenticity of host '192.168.200.151 (192.168.200.151)' can't be established.
ECDSA key fingerprint is SHA256:gm/RhqGrfDo5Rgcr/LmBAaqPv6tmni7cRpXjGEWZQpg.
ECDSA key fingerprint is MD5:ae:f6:0b:6e:80:96:67:cf:bd:e8:f5:b5:c4:e0:da:11.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.200.151' (ECDSA) to the list of known hosts.
git@192.168.200.151's password:
warning: You appear to have cloned an empty repository.
[root@jenkins test]# ls
app

[root@jenkins test]# cd app
[root@jenkins app]# touch test.sh
[root@jenkins app]# echo "hello" >> test.sh
[root@jenkins app]# git add *
[root@jenkins app]# git commit -m "first"

*** Please tell me who you are.

Run

git config --global user.email "you@example.com"
git config --global user.name "Your Name"

to set your account's default identity.
Omit --global to set the identity only in this repository.

fatal: unable to auto-detect email address (got 'root@jenkins.(none)')
[root@jenkins app]# git config --global user.email "493115250@qq.com"
[root@jenkins app]# git config --global user.name "cash_su"

[root@jenkins app]# git commit -m "first"
[master (root-commit) 731ab6e] first
1 file changed, 1 insertion(+)
create mode 100644 test.sh
[root@jenkins app]# git push -u origin master
git@192.168.200.151's password:
Counting objects: 3, done.
Writing objects: 100% (3/3), 207 bytes | 0 bytes/s, done.
Total 3 (delta 0), reused 0 (delta 0)
To git@192.168.200.151:/home/git/repos/app.git
* [new branch] master -> master
Branch master set up to track remote branch master from origin.

给git做一个免秘钥

[root@jenkins app]# ssh-keygen 
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:toacG+JZEW1VNmQKQcp9slNyCHCaq55K9Ym82EZcboU root@jenkins
The key's randomart image is:
+---[RSA 2048]----+
|    ..o.+..o*    |
|     = = + + .   |
|    o = B =      |
|     E + B       |
|  ..+ o S        |
|  o+o+.= o       |
| .oooo* o        |
|..o+.+ +         |
|.o+oo .          |
+----[SHA256]-----+
[root@jenkins app]# 
[root@jenkins app]# 
[root@jenkins app]# ssh-copy-id -i ~/.ssh/id_rsa.pub git@192.168.200.151
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/root/.ssh/id_rsa.pub"
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
git@192.168.200.151's password: 

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh 'git@192.168.200.151'"
and check to make sure that only the key(s) you wanted were added.

[root@jenkins app]# ssh git@192.168.200.151
Last login: Sun Dec 23 13:28:56 2018
[git@git ~]$ exit

准备安装Jenkins

Jenkins官网：https://jenkins.io/

redhat版Jenkins官网下载页面：https://pkg.jenkins.io/redhat-stable/

下载了rpm包以后通过localinstall直接安装

yum -y localinstall 安装包名

利用yum直接安装Jenkins

[root@jenkins app]# wget -O /etc/yum.repos.d/jenkins.repo https://pkg.jenkins.io/redhat-stable/jenkins.repo
#导入证书秘钥

[root@jenkins app]# rpm --import https://pkg.jenkins.io/redhat-stable/jenkins.io.key

[root@jenkins app]# yum -y install jenkins

#用命令查看安装路径

[root@jenkins app]# rpm -ql jenkins
/etc/init.d/jenkins
/etc/logrotate.d/jenkins
/etc/sysconfig/jenkins
/usr/lib/jenkins
/usr/lib/jenkins/jenkins.war
/usr/sbin/rcjenkins
/var/cache/jenkins
/var/lib/jenkins
/var/log/jenkins
[root@jenkins app]#

安装java

[root@jenkins ~]# tar xf jdk-8u171-linux-x64.tar.gz -C /usr/local/
[root@jenkins ~]# cd /usr/local/
[root@jenkins local]# mv jdk1.8.0_171/ jdk
[root@jenkins local]# vim /etc/profile
[root@jenkins local]# tail -3 /etc/profile
export    JAVA_HOME=/usr/local/jdk/
export    PATH=$PATH:$JAVA_HOME/bin
export    CLASSPATH=.$CLASSPATH:$JAVA_HOME/lib:$JAVA_HOME/lib/tools.jar

[root@jenkins local]# source /etc/profile
[root@jenkins local]# java -version
java version "1.8.0_171"
Java(TM) SE Runtime Environment (build 1.8.0_171-b11)
Java HotSpot(TM) 64-Bit Server VM (build 25.171-b11, mixed mode)
[root@jenkins local]#

安装maven

[root@jenkins ~]# tar xf apache-maven-3.5.0-bin.tar.gz -C /usr/local/
[root@jenkins ~]# cd /usr/local/
[root@jenkins local]# mv apache-maven-3.5.0/ maven
[root@jenkins local]# vim /etc/profile
[root@jenkins local]# tail -2 /etc/profile
MAVEN_HOME=/usr/local/maven
export    PATH=${MAVEN_HOME}/bin:$PATH

[root@jenkins local]# source /etc/profile
[root@jenkins local]# mvn -v
Apache Maven 3.5.0 (ff8f5e7444045639af65f6095c62210b5713f426; 2017-04-04T03:39:06+08:00)
Maven home: /usr/local/maven
Java version: 1.8.0_171, vendor: Oracle Corporation
Java home: /usr/local/jdk/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "3.10.0-862.el7.x86_64", arch: "amd64", family: "unix"
[root@jenkins local]#

启动jenkins

[root@jenkins ~]# ln -s /usr/local/jdk/bin/java /usr/bin/
[root@jenkins ~]# systemctl start jenkins
[root@jenkins ~]# ss -antup | grep 8080
tcp    LISTEN     0      50       :::8080                 :::*                   users:(("java",pid=5642,fd=162))
[root@jenkins ~]# 

添加到开机自启

[root@jenkins ~]# systemctl enable jenkins
jenkins.service is not a native service, redirecting to /sbin/chkconfig.
Executing /sbin/chkconfig jenkins on
[root@jenkins ~]# echo $?
0

开始使用Jenkins

查看解锁码
[root@jenkins ~]# cat /var/lib/jenkins/secrets/initialAdminPassword
6c2b251fde9348e1ba5f3ecd968f0917
[root@jenkins ~]# 

使用默认的插件即可

 

权限管理

开发人员用的   生产环境项目代码版本发布（A/B测试等）

测试人员用的      　　测试环境自动部署

运维人员用的            生产环境项目代码版本回滚

安装控制角色的插件

 

 测试创建2个用户，一个开发，一个测试的

同样主从user2测试的账号密码

最终的权限选项

创建2个项目来实验权限，空项目即可

超户视角

测试视角

开发视角

在超户上构建两个项目的视图

超户视角

开发视角

测试视角

测试开发的构建功能

超户改变配置

 

构建成功

带参数的构建（在超户里修改配置）

 

在开发视角开始构建

构建成功

安装插件Extended可以让用户自己选分支

 在超户修改配置，进行多项选择实验

我们可以将参数写到文件里，让其引用这个文件，就可以有参数了

[root@jenkins ~]# vim /opt/jenkins.property
[root@jenkins ~]# cat /opt/jenkins.property
ok=can1.can2,can3

用git参数化构建

安装插件

添加私钥到全局凭据

[root@jenkins ~]# cat ~/.ssh/id_rsa
-----BEGIN RSA PRIVATE KEY-----
MIIEpQIBAAKCAQEA11fzf+Ur3ENQRFazuqNn3WgSca9s9b4mT71WYjSx0OlwRQKW
cAht2NAhR7ZYWFcu8kXJiPYNiuNWvNzRaPRQLNdELrplI4mJlznjUYlogVKlJTEi
vXlWnI/sCnwOADAYMeMCB+vvMuHs+XAzShoBPa7spZ2zOsUEgkdQ9b/nnRdI6rgz
A/V0xMOoChXQviis2fdUgxt5se6AVIzjhEJGC1L28Zy/Q+2oWDUgQW3ewlW4tdxQ
25ddNjxWuhUvL6/7mx2PKTV4gtyIk3r/7yUqsHWuWEVSoswFj1A2lVMIvTbiAMhH
FLECFlQU7uNIbETQw7H0UCoy28WecBU4aSrIQQIDAQABAoIBAQCIheUFR3hoG3Du
8nzdra0yrEFNO+d7YMMPOL1kY338MZMQ3VQc0Os7UrBWs58M2rETvfTIVR4+2GRs
Nh65SHLwCsXaTifCwPavHm8kiVXs70Vt79nTf/LOLVx7RSznJ5afQglOlmC+xIcl
mOGbcCMrRRQY54LylmeGZMpKExE3AJpnr2+HH0ivzIdEtODPdoeGhlWvmtt/iAUf
9sdpfiBlOmFIZO6Zx4FNCfz+Ovaa6+Vt0EjlAXh32BHOcaDhwC67jMqD//3Ft/rk
j8KJrJN3KUgZ5He7pEBBXap8LsehWcCvT83syKEQAivq5qS86thPSDLTjhN+Pruc
dUM5u4XxAoGBAP8e5gMVn4089719kReQpURFz0KPqEHOJm4u9FEpEyi+YWtTfqzn
UoQ886gU7nchiaBPzpSooTgDB+iuc8s1kGT2BXtW1e7A4OjXyzKB9mV5DqjFxnYb
bFAmGJF0PvtetmS2ghSRcXO4tsOlVzF/i40DgvbY+cZUILezkgn3tAKVAoGBANgV
9Lueas4YfuX2n33Pg03IUEpaUUSz/ZKLW7aW9vwbXsvSIXRRRLVbrXQ0XCG9dP1L
41DSk5QXSMCXu1i0nC5qBYAaftO9TUCoz3JgdwF5/YABHSNF+H/p92nSDPMEGwxD
2EhbfdL8x9ArJksKX/p476gKDx14kNjKvWiZx4/9AoGBAMqnZbjPhWUxJ+4q/4VD
jjRUa9YIvXRAaICf5c1Onnx/9mzF71sziXWn4TkEH4Uca/GfU479AMu4hKDNawfh
rai1URdvnBLCviXXvP6LBAoJBp8EM6kAEaL9EAkC2UDeNG5+F4h1HDT7Zpq1DTUx
hs3mGzMwmgB0NWUXTIuEa0adAoGANJzb8ta2oKm8NBfha4ucJ9MvIXtuMDE2+3ht
Az8sseOkKDJorN6gwRuqVxHsoNZ1ZrsUhPhQsI0ezK3lEsse//oWjsNkv/9mkOjJ
Ycr1Dun5/DHJO25s/BAmiqB3QLBuOYVHYw7LyxR7PkdTUpAbIGxTxfF1DrLtaaur
hI101q0CgYEA8IQKMINCF4SuJ+TSAtzav0WKBqayOWi1mdVoOZl7MoqxjUywFXw5
V4oKxxty3tWvTa5MR6R0jfY0Om92LWXKmicZWnq6pZC/26H3ZuuMwO1WlGE5OBmo
ZpuYlD1okBWUhVSzKmzLp6MzCpUgUbu2ffuSjeaSv6bVEYdS0l/uX9Q=
-----END RSA PRIVATE KEY-----
[root@jenkins ~]# 

修改配置文件

节点主从构建，

创建全局凭证，

测试用新的节点构建

在git服务器上查看Jenkins工作的目录有没有拉取下来

[root@git A-web]# pwd
/var/lib/jenkins/workspace/A-web
[root@git A-web]# ls 
test.sh
[root@git A-web]# cat test.sh 
hello
[root@git A-web]#