pipline中執行shell腳本推送鏡像並且部署

實驗架構：

192.168.0.96    gitlab

192.168.0.97    jenkins

192.168.0.98    harbor、docker集群


說明：下面代碼編譯鏡像那一步的代碼必須靠左，目的是不要有空格，否則報錯，deploy那一步也必須是那種格式，否則報錯

安裝完jenkins后首先生成pipeline可以用的git鏈接地址，參照下面連接，看里面的第7步

https://www.cnblogs.com/effortsing/p/10468840.html


pipline腳本如下：

pipeline {
    agent any
    stages {
        stage('git checkout'){
            steps {
                echo 'git clone'
                checkout([$class: 'GitSCM', branches: [[name: '*/master']], doGenerateSubmoduleConfigurations: false, extensions: [], submoduleCfg: [], userRemoteConfigs: [[credentialsId: 'c32a3a24-2c9d-4c8d-b456-9d6d0badf3a2', url: 'http://192.168.0.96:8081/zihao/test.git']]])
            }
        }
        stage('maven build'){
            steps {
                echo 'maven build'
                    sh '''
                export JAVA_HOME=/usr/local/jdk1.8.0_171/
                     /usr/local/apache-maven-3.5.4/bin/mvn clean package -Dmaven.test.skip=true
                '''
            }
        }

        stage('docker build and push images'){
            steps {
echo 'docker build and push images'
sh '''
REPOSITORY=192.168.0.98:5000/library/solo/solo:${Tag}
cat >Dockerfile<<EOF
FROM 192.168.0.98:5000/library/tomcat-85:latest
RUN rm -rf /usr/local/tomcat/webapps/ROOT/
COPY target/*.war /usr/local/tomcat/webapps/ROOT.war
WORKDIR /usr/local/tomcat
EXPOSE 8080
CMD ["./bin/catalina.sh", "run"]
EOF
docker build -t $REPOSITORY .
docker login -u admin -p Harbor12345 192.168.0.98:5000
docker push $REPOSITORY
'''
            }
            }

        stage('deploy'){
            steps {
echo 'deploy'
sh '''
REPOSITORY=192.168.0.98:5000/library/solo/solo:${Tag}
cat >deploy.sh<<EOF
#!/bin/bash
ssh root@192.168.0.98 'docker container run -d --name blog-solo-2 -v /opt:/opt -p 89:8080 $REPOSITORY'
EOF
chmod +x deploy.sh
sh deploy.sh
'''
            }
            }

    }
}


說明：遠程執行命令前提需要安裝ssh agent插件，

現在ssh agent的認證，已不支持明文用戶密碼，而只能用加密方式實現。

所以先在jenknis和docker集群之間實現ssh免密碼rsa證書登陸。

私鑰放jenkins，公鑰放在docker集群，然后，將私鑰拿出來，寫入到jenkins憑據

參照：https://blog.csdn.net/weixin_34067980/article/details/86444168



腳本參照：

https://blog.csdn.net/jackyzhousales/article/details/81713004

https://blog.csdn.net/a1010256340/article/details/83989059


生成pipeline可以用的git鏈接地址參照：

https://www.cnblogs.com/FRESHMANS/p/8184874.html