（1/2）集成部署（CICD）· 使用篇

# 关闭防火墙systemctl stop firewalldsystemctl disable firewalld# 关闭selinux# 永久关闭selinux（重启后生效）sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config# 临时关闭selinux（不需要重启，立即生效）setenforce 0# 关闭swap# 永久关闭swap（重启后生效）sed -ri 's/.*swap.*/#&/' /etc/fstab # 临时关闭swap(不需要重启，立即生效)swapoff -a# 将桥接的IPv4流量传递到iptables的链cat > /etc/sysctl.d/kubernetes.conf << EOFnet.bridge.bridge-nf-call-ip6tables = 1net.bridge.bridge-nf-call-iptables = 1net.ipv4.ip_forward = 1EOF# 立即生效sysctl --system# 时间同步yum install ntpdate -yntpdate -u pool.ntp.org# 添加定时crontab  -l*/20 * * * * /sbin/ntpdate -u pool.ntp.org > /dev/null 2>&1

awk -F\' '$1=="menuentry " {print i++ " : " $2}' /etc/grub2.cfg或者rpm -qa kernel

rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org # 导入elrepo的签名rpm -Uvh http://www.elrepo.org/elrepo-release-7.0-5.el7.elrepo.noarch.rpm # 升级elrepo源

wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo --no-check-certificateyum makecache

yum --disablerepo="*" --enablerepo="elrepo-kernel" list available

yum --enablerepo=elrepo-kernel install kernel-ml kernel-ml-devel -y

awk -F\' '$1=="menuentry " {print i++ " : " $2}' /etc/grub2.cfg

grub2-set-default 0

uname -a

#安装wgetyum install wget -y#下载docker-ce源wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo#查看可以安装的docker版本yum list docker-ce --showduplicates | sort -r#安装dockeryum install -y docker-ce-20.10.10 docker-ce-cli-20.10.10 containerd.io-1.4.12#查看docker版本docker -v#创建docker配置目录mkdir /etc/docker#配置docker源cat > /etc/docker/daemon.json << EOF{"registry-mirrors": ["https://b9pmyelo.mirror.aliyuncs.com"]}EOF#重载systemctl daemon-reload#设置开机启动systemctl enable docker#启动docker服务systemctl start docker#旧版docker迁移grep -rl 'docker-runc' /var/lib/docker/containers/ | xargs sed -i 's/docker-runc/runc/g'systemctl stop dockersystemctl start docker#查看dockerdocker -v

docker -v

cat > Dockerfile << EOFFROM jenkins/jenkins:ltsUSER root #指定容器的源RUN sed -i s@/archive.ubuntu.com/@/mirrors.aliyun.com/@g /etc/apt/sources.listRUN sed -i s@/security.ubuntu.com/@/mirrors.aliyun.com/@g /etc/apt/sources.listRUN apt clean#安装集成部署需要用到软件RUN apt-get updateRUN apt-get install -y wget RUN apt-get install -y iputils-ping#RUN apt-get install -y libltdl7 RUN apt-get install -y apt-transport-https#RUN apt-get install -y npm ENTRYPOINT ["/sbin/tini","--","/usr/local/bin/jenkins.sh"]EOF

cat > Jenkins.sh << EOFecho 创建Jenkins数据目录mkdir jenkins_homeecho 停止容器中...docker stop jenkinsserverecho 删除容器中...docker rm jenkinsserver echo 删除镜像中...docker rmi myjenkins echo 构建镜像中...docker build -t myjenkins .echo 创建容器中...docker run --restart=always --name jenkinsserver \--env JAVA_OPTS="-server -Xms1024m -Xmx2048m -XX:PermSize=256m -XX:MaxPermSize=512m" \-e TZ=Asia/Shanghai \-p 8888:8080 -p 50000:50000 \-u 0 \-v /var/ans/jenkins/home:/var/jenkins_home \-v /var/run/docker.sock:/var/run/docker.sock \-v /usr/bin/docker:/usr/bin/docker \-d myjenkinsEOF

bash Jenkins.sh

docker ps

docker exec -u 0 jenkinsserver /bin/sh -c "cat /var/jenkins_home/secrets/initialAdminPassword"

echo 构建app中...docker build -t myapp .echo 创建容器中...docker run --restart=always --name myapp \-e TZ=Asia/Shanghai \-p 8080:80 \-d myappecho 构建并部署完成

前面的构建部署在所有CI/CD项目中基本上都是大同小异这里这里只是演示了主动构建部署演示后续操作开发人员提交代码,系统触发CI/CD任务构建失败,给与响应,如果钉钉,微信公众号提醒部署失败,同上远程部署流水线工作部署构建测试等等