# CI/CD流程
代码提交 -> 代码检查 -> 单元测试 -> 构建 -> 部署 -> 测试 -> 发布

# 工具链
Git：代码版本控制
Jenkins：持续集成
Docker：容器化
Kubernetes：容器编排

# 设计原则
自动化：减少人工干预
可追溯：记录每次构建
快速反馈：及时发现问题
安全合规：代码审查和测试

# 安装Jenkins
$ sudo dnf install java-11-openjdk -y
$ sudo wget -O /etc/yum.repos.d/jenkins.repo https://pkg.jenkins.io/redhat-stable/jenkins.repo
$ sudo rpm –import https://pkg.jenkins.io/redhat-stable/jenkins.io.key
$ sudo dnf install jenkins -y

# 启动Jenkins
$ sudo systemctl start jenkins
$ sudo systemctl enable jenkins

# 查看初始密码
$ sudo cat /var/lib/jenkins/secrets/initialAdminPassword
abc123def456ghi789

# 访问Web界面
http://localhost:8080

# 安装插件
Git Plugin
Pipeline
Docker Pipeline
Kubernetes Plugin

# 创建Jenkinsfile
$ cat > Jenkinsfile << 'EOF' pipeline { agent any environment { IMAGE_NAME = 'myapp' IMAGE_TAG = "${BUILD_NUMBER}" } stages { stage('Checkout') { steps { git 'https://github.com/user/myapp.git' } } stage('Code Analysis') { steps { sh 'sonar-scanner' } } stage('Build') { steps { sh 'mvn clean package' } } stage('Test') { steps { sh 'mvn test' } } stage('Build Image') { steps { script { docker.build("${IMAGE_NAME}:${IMAGE_TAG}") } } } stage('Push Image') { steps { script { docker.withRegistry('https://registry.fgedu.net.cn', 'docker-credentials') { docker.image("${IMAGE_NAME}:${IMAGE_TAG}").push() } } } } stage('Deploy') { steps { sh "kubectl set image deployment/myapp myapp=${IMAGE_NAME}:${IMAGE_TAG}" } } } post { success { echo 'Deployment successful!' } failure { echo 'Deployment failed!' } } } EOF

# 场景：搭建Web应用完整CI/CD流水线

# 1. 配置Git仓库
$ git init
$ git remote add origin https://github.com/user/webapp.git

# 2. 创建Dockerfile
$ cat > Dockerfile << 'EOF' FROM nginx:latest COPY dist/ /usr/share/nginx/html/ EXPOSE 80 EOF # 3. 创建Jenkins流水线项目 # 在Jenkins中创建Pipeline项目，配置Git仓库地址 # 4. 配置Webhook # 在Git仓库中配置Webhook指向Jenkins # 5. 测试流水线 $ git add . $ git commit -m "Initial commit" $ git push origin main # 6. 查看构建结果 # 在Jenkins控制台查看构建日志 # 7. 验证部署 $ kubectl get pods $ kubectl get svc