-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #4 from wzhkgc/dev
Dev
- Loading branch information
Showing
1 changed file
with
113 additions
and
63 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,4 +1,4 @@ | ||
| # Jenkins部署 | ||
| # Jenkins部署 | ||
|
|
||
| [TOC] | ||
|
|
||
|
|
@@ -96,23 +96,26 @@ run: sidekiq: (pid 9462) 146s; run: log: (pid 9488) 143s | |
| - 默认账号：`root` | ||
| - 默认密码：`cat /etc/gitlab/initial_root_password | grep Password:` | ||
|
|
||
|  | ||
|  | ||
|
|
||
| ### 1.5、修改root登录密码 | ||
|
|
||
| - 点击右上角用户头像，在下拉菜单中点`Preferences`，在左侧列表中开打`password`。本案例中使用的root密码为pwd12345，注意密码长度至少8位。 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| ### 1.6、创建demo测试项目 | ||
|
|
||
| - 创建一个项目名称叫`demo` | ||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| ### 1.7、上传代码 | ||
|
|
||
|
|
@@ -131,7 +134,8 @@ run: sidekiq: (pid 9462) 146s; run: log: (pid 9488) 143s | |
|
|
||
| ### 1.8、验证上传的代码 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| ## 二、部署Jenkins所需软件 | ||
|
|
||
|
|
@@ -200,33 +204,40 @@ Java HotSpot(TM) 64-Bit Server VM 18.9 (build 11.0.16.1+1-LTS-1, mixed mode) | |
| 72a19165668b4b1daec409d9edce6c4e | ||
| ``` | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| ### 3.2、选择插件安装方式 | ||
|
|
||
| - 注意：如果有插件安装失败也没关系，因为安装插件需要网络，结束后可以点击重试。 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| ### 3.3、创建管理员用户 | ||
|
|
||
| - 本案例将初始的管理员账号和密码都设置为admin | ||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|
|
||
| ### 3.4、Jsenkins插件管理 | ||
|
|
||
| - 在安装Jenkins时，选择默认安装插件会很慢，甚至会失败，因此我们可以配置插件源为国内的地址。 | ||
| - 进入Manage Jenkins——>Plugins——>Advancedsettings最下面有Update Site（升级站点），设置为如下链接，并点“提交”按钮 | ||
| - https://mirrors.tuna.tsinghua.edu.cn/jenkins/updates/update-center.json | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| - 然后重启Jenkins | ||
|
|
||
|
|
@@ -294,7 +305,8 @@ Pipeline: DeclarativeLocalization: Chinese (Simplified) | |
| - “Dashboard”——>“ManageJenkins”——>“Security”——>“Authentication” | ||
| - 将授权策略修改为“Role-Based Strategy”，并保存设置。 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| ### 4.2、角色 | ||
|
|
||
|
|
@@ -319,13 +331,15 @@ Pipeline: DeclarativeLocalization: Chinese (Simplified) | |
|
|
||
| - 添加Global roles | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| - 添加item roles | ||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| #### 4.2.4、创建用户 | ||
|
|
||
|
|
@@ -334,40 +348,53 @@ Pipeline: DeclarativeLocalization: Chinese (Simplified) | |
| - ”Dashboard“——>”Manage Jenkins“——>”Users“，在右上角点击”CreateUser“，创建用户。 | ||
| - 添加两个用户`zhangsan`，`lisi` | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| ##### 4.2.4.2、绑定角色 | ||
|
|
||
| - ”Dashboard“——"Manage Jenkins"——>”Manage and Assign Roles“，然后点击”Assign Roles“ | ||
| - 为zhangsan用户绑定baseRole和role1角色 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
| - 为lisi用户绑定baseRole和role2角色 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| #### 4.2.5、创建项目测试权限 | ||
|
|
||
|
|
@@ -378,27 +405,34 @@ Pipeline: DeclarativeLocalization: Chinese (Simplified) | |
|
|
||
| - ”Dashboard“——>”新建Item“——>”确定“按钮 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| - 创建`lisi`项目 | ||
| - ”Dashboard“——>”新建Item“——>”确定“按钮 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| ##### 4.2.5.2、测试权限 | ||
|
|
||
| - 分别用`zhangsan`和`lisi`的身份登录到系统 | ||
| - 可以发现，每个用户只能管理属于自己的角色范围内的项目 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| ## 五、凭证管理 | ||
|
|
||
|
|
@@ -433,11 +467,13 @@ Pipeline: DeclarativeLocalization: Chinese (Simplified) | |
|
|
||
| - ”Manage jenkins“——>”Credentials“，打开如下页面，并点击”全局“，进入全局凭据管理界面，如下图所示 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| - 在如下界面中，点击右上角的”Add Credentials“按钮，添加凭据 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| #### 5.2.2、添加凭据参数 | ||
|
|
||
|
|
@@ -449,11 +485,12 @@ Pipeline: DeclarativeLocalization: Chinese (Simplified) | |
| - ID：选填（设置平局的唯一标识，不设置会自动分配一个唯一标识） | ||
| - 描述：选填（凭据名称，此处最好添加一下，使用凭据的时候便于识别，不设置就是用用户名） | ||
|
|
||
|  | ||
|  | ||
|
|
||
| - 点击”Create“创建此凭据，添加结果如下： | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| #### 5.2.3、使用凭据 | ||
|
|
||
|
|
@@ -463,27 +500,31 @@ Pipeline: DeclarativeLocalization: Chinese (Simplified) | |
| [root@jenkins ~]# yum -y install git | ||
| ``` | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|  | ||
|
|
||
| ##### 5.2.3.2、配置源码管理 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| ##### 5.2.3.3、发布项目 | ||
|
|
||
|  | ||
|  | ||
|
|
||
| - 运行成功之后，如果没有报错，可以刷新页面，就可以看到**绿色**的标识了 | ||
|
|
||
|  | ||
| - 运行成功之后，如果没有报错，可以刷新页面，就可以看到**绿色**的标识了 | ||
|
|
||
|  | ||
| ### 5.3、添加SSH类型的凭据 | ||
|
|
||
| - SSH类型的凭据可以使Jenkins在拉去gitlab中的代码时使用密钥对的方式，不仅实现了免密连接，同时也会对数据进行加密，是一种安全可靠的凭据方式。 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|
|
||
| #### 5.3.1、Jenkins主机生成密钥对 | ||
|
|
||
|
|
@@ -504,19 +545,21 @@ ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClBYGM15IosBfenQszhhjbet06ww1YeapOb0lv7M+o | |
|
|
||
| - 用root用户登录gitlab，点击右上角的头像，在下拉菜单中点”perferneces“，然后在左侧点击”SSH Keys“ | ||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|  | ||
|
|
||
| #### 5.3.3、Jenkins添加SSH凭据 | ||
|
|
||
| - ”Manage jenkins“——>”Credentials“，打开如下页面，并点击”全局”，进入全局凭据界面 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|  | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
| #### 5.3.4、添加凭据参数 | ||
|
|
||
|
|
@@ -560,17 +603,21 @@ cKm534YYtALBTEVXsDalL9SP5JRnBqKPPzF7Wu88d/rEL7r1UaQ2 | |
| -----END RSA PRIVATE KEY----- | ||
| ``` | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| #### 5.3.5、测试凭据 | ||
|
|
||
| ##### 5.3.5.1、创建test02项目 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| ##### 5.3.5.2、配置源码管理 | ||
|
|
||
|
|
@@ -588,14 +635,17 @@ Warning: Permanently added '192.168.93.102' (ECDSA) to the list of known hosts. | |
| [email protected]'s password: | ||
| ``` | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| ##### 5.3.5.3、发布项目 | ||
|
|
||
|  | ||
|  | ||
|
|
||
|
|
||
| - 运行成功之后，如果没有报错，可以刷新页面，就可以看到**绿色**的标识了 | ||
|
|
||
|  | ||
|  | ||