安装master

• 下载master镜像：docker pull cnkevin/jenkins
• 启动master镜像：docker run -d --name="jenkins_master" -p 8100:8080 cnkevin/jenkins
• 配置nginx.conf
• 访问jks

• 复制initialAdminPassword文件中的内容到输入框中，该内容即为admin密码
• 安装推荐的插件

• 设置密码或者跳过

• 若安装失败，可手动安装插件，具体参考[附1-jks插件]

配置从节点，以maven为例

• 下载镜像: docker pull cnkevin/jenkins-slave-dind-java-maven
• 运行镜像: docker run -d --name='slave-maven' cnkevin/jenkins-slave-dind-java-maven
• 添加凭据

* username:登陆从节点服务器时的用户名
* password:登陆从节点服务器时的密码
* id:凭据标识

• 在jks中添加maven从节点

• 参考上述步骤添加python节点
• 在maven容器中测试git 和mvn 命令是否正常
  • git clone 测试git命令正常(github均是公开，不需要配置ssh key ,如果是gitlab需要设置凭据);
  • 通过vi命令在home/jenkins/.m2下创建settings.xml文件

配置job

• 新建pipelines任务
• 项目添加 dockerfile
• jenkins窗口中构建docker时报错

* /home/jenkins/workspace/common-frame # docker ps
Cannot connect to the Docker daemon. Is the docker daemon running on this host?
* 解决方案：创建slave-maven-docker 容器时，挂载docker.sock文件;然后在jenkins中配置从节点，将ip改为最新的slave-maven-docker容器ip
* 具体命令：docker run -d --name=slave-maven-docker -v /home/liu-kevin/workspace:/home/jenkins/workspace -v /var/run/docker.sock:/var/run/docker.sock 36f8f8a4736b
注：此处应再加上mvn本地仓库的目录挂载
参考：https://blog.csdn.net/zhou8622/article/details/52259709

• pipeline内容

//项目github地址
def github = 'https://github.com/clkevin/$app_name.git'
def image_name = "docker.io/cnkevin/$app_name:1.0.0-test"

node('slave-maven-docker'){
    stage('checkout') { 
        git branch: "$brans", credentialsId: 'github', url: github
    }
    stage('compile') { 
        sh "mvn -Dmaven.test.skip=true clean package"
    }
    
    stage('push docker') { 
        sh "sudo docker build -t $image_name -f docker/Dockerfile ."
        sh "sudo docker push $image_name"
    }
    stage('run docker'){
        sh "sudo docker run -d $image_name docker/entrypoint.sh"
    }
}

附1-jks插件

以上插件参考
打包好的部分插件
插件名称是想要安装的插件，在其它已安装的jks中查找该插件，并点击版本，可查找到插件的mavenid即hpi包;然后在http://updates.jenkins-ci.org/download/plugins/下载需要的插件

附2-jks pipeline

app_version = "1.0."+ env.BUILD_NUMBER
currentBuild.displayName = app_version
def image_name = "$DOCKER_HUB_ADDRESS/$app_name:$app_version-$tag"
try{
    node {
        wrap([$class: 'BuildUser']) {
            // aa="${BUILD_USER}"
            // bb="${BUILD_USER_ID}"
            builder="${BUILD_USER_EMAIL}"
        }
    }
    node('slave-maven'){
        stage('checkout') { 
            git branch: "$brans", credentialsId: 'gitlab', url: "$GIT_URL/${app_name}.git"
       }
        stage('maven build') {
            sh "mvn -Dmaven.test.skip=true clean package"
        }
        stage('push docker') {
            sh "docker build -t $image_name -f docker/Dockerfile ."
            sh "docker push $image_name"  
        }
    }
    node('slave-python') {
        stage('deploy') {
            sh """python /home/jenkins/script/deploy_testA.py $cluster_id $app_name $rc_number $image_name $app_status $tag $USE_CONFIG_SERVER $request_mem $limit_mem $name_space""" 
        }
        stage('check_deploy') {
            sh """python /home/jenkins/script/check_svc.py $cluster_id $app_name $name_space"""
        }
    }
} catch (e) {
        // If there was an exception thrown, the build failed
            currentBuild.result = "FAILED"
            throw e
        } finally {
        // Success or failure, always send notifications
        notifyBuild(currentBuild.result)
        }
        
def notifyBuild(String buildStatus = 'STARTED') {
    // build status of null means successful
    buildStatus = buildStatus ?: 'SUCCESSFUL'
  // Default values
  def subject = "Jenkins $tag ${buildStatus}: Job '${env.JOB_NAME}' (${env.BUILD_NUMBER})"
  def details = '''(本邮件是程序自动下发的，请勿回复！)<br/><hr/>

项目名称：$PROJECT_NAME<br/><hr/>

构建编号：$BUILD_NUMBER<br/><hr/>

构建状态：$BUILD_STATUS<br/><hr/>

触发原因：${CAUSE}<br/><hr/>

构建日志地址：<a href="${BUILD_URL}console">${BUILD_URL}console</a><br/><hr/>

构建地址：<a href="$BUILD_URL">$BUILD_URL</a><br/><hr/>

变更集:${JELLY_SCRIPT,template="html"}<br/><hr/>'''

  emailext (
      //attachLog: true,
      subject: subject,
      body: details,
      to: "$builder"
    )
}

附3-dockerfile

FROM cnkevin/java-jre

ENV PROJECT_DIR=/opt/docker
WORKDIR $PROJECT_DIR

COPY target/app.jar $PROJECT_DIR/app.jar
COPY docker/entrypoint.sh $PROJECT_DIR/entrypoint.sh
RUN chown -R daemon:daemon $PROJECT_DIR

EXPOSE 8080
USER daemon

ENTRYPOINT ["sh", "entrypoint.sh"]

entrypoint.sh 中启动镜像中的java，同时可从配置中心拉取配置文件，达到不同环境配置文件不同的效果

附4-entrypoint.sh

#!/usr/bin/env bash


echo -e "下载应用$APPLICATION_NAME标签为$TAG的配置文件..."
wget -O application.yml http://$CONFIG_SERVER_ADDRESS/api/download?tag=$TAG\&application=$APPLICATION_NAME
echo -e "========================== 配置文件信息 ========================== \n"
cat $PROJECT_DIR/application.yml
echo -e "\n=============================================================== \n"
exec java -Djava.security.egd=file:/dev/./urandom -jar $PROJECT_DIR/app.jar --spring.config.name=app --spring.config.location=$PROJECT_DIR/application.yml