# 微服务架构配置
$ cat > docker-compose.yml << 'EOF' version: '3.8' services: api-gateway: image: nginx:alpine ports: - "80:80" volumes: - ./nginx.conf:/etc/nginx/nginx.conf depends_on: - user-service - order-service - product-service networks: - microservices user-service: image: fgedu/user-service:latest environment: - DB_HOST=user-db - DB_PORT=3306 depends_on: - user-db deploy: replicas: 3 networks: - microservices order-service: image: fgedu/order-service:latest environment: - DB_HOST=order-db - DB_PORT=3306 - REDIS_HOST=redis depends_on: - order-db - redis deploy: replicas: 3 networks: - microservices product-service: image: fgedu/product-service:latest environment: - DB_HOST=product-db - DB_PORT=3306 - ELASTICSEARCH_HOST=elasticsearch depends_on: - product-db - elasticsearch deploy: replicas: 3 networks: - microservices user-db: image: mysql:8.0 environment: - MYSQL_ROOT_PASSWORD=root123 - MYSQL_DATABASE=user_db volumes: - user-db-data:/var/lib/mysql networks: - microservices order-db: image: mysql:8.0 environment: - MYSQL_ROOT_PASSWORD=root123 - MYSQL_DATABASE=order_db volumes: - order-db-data:/var/lib/mysql networks: - microservices product-db: image: mysql:8.0 environment: - MYSQL_ROOT_PASSWORD=root123 - MYSQL_DATABASE=product_db volumes: - product-db-data:/var/lib/mysql networks: - microservices redis: image: redis:alpine volumes: - redis-data:/data networks: - microservices elasticsearch: image: elasticsearch:7.17.0 environment: - discovery.type=single-node - "ES_JAVA_OPTS=-Xms512m -Xmx512m" volumes: - elasticsearch-data:/usr/share/elasticsearch/data networks: - microservices volumes: user-db-data: order-db-data: product-db-data: redis-data: elasticsearch-data: networks: microservices: driver: bridge EOF

# 启动微服务架构
$ docker-compose up -d
Creating network “architecture-optimization_microservices” with driver “bridge”
Creating volume “architecture-optimization_user-db-data” with default driver
Creating volume “architecture-optimization_order-db-data” with default driver
Creating volume “architecture-optimization_product-db-data” with default driver
Creating volume “architecture-optimization_redis-data” with default driver
Creating volume “architecture-optimization_elasticsearch-data” with default driver
Creating architecture-optimization_user-db_1 … done
Creating architecture-optimization_order-db_1 … done
Creating architecture-optimization_product-db_1 … done
Creating architecture-optimization_redis_1 … done
Creating architecture-optimization_elasticsearch_1 … done
Creating architecture-optimization_user-service_1 … done
Creating architecture-optimization_order-service_1 … done
Creating architecture-optimization_product-service_1 … done
Creating architecture-optimization_api-gateway_1 … done

# 验证服务状态
$ docker-compose ps
Name Command State Ports
——————————————————————————————————————————-
architecture-optimization_api-gateway_1 /docker-entrypoint.sh ngin … Up 0.0.0.0:80->80/tcp
architecture-optimization_elasticsearch_1 /bin/tini — /usr/local/bi … Up 9200/tcp, 9300/tcp
architecture-optimization_order-db_1 docker-entrypoint.sh mysqld Up 3306/tcp, 33060/tcp
architecture-optimization_order-service_1 java -jar app.jar Up 8080/tcp
architecture-optimization_product-db_1 docker-entrypoint.sh mysqld Up 3306/tcp, 33060/tcp
architecture-optimization_product-service_1 java -jar app.jar Up 8080/tcp
architecture-optimization_redis_1 docker-entrypoint.sh redis … Up 6379/tcp
architecture-optimization_user-db_1 docker-entrypoint.sh mysqld Up 3306/tcp, 33060/tcp
architecture-optimization_user-service_1 java -jar app.jar Up 8080/tcp

# 代码质量检查
$ cat > sonar-project.properties << 'EOF' sonar.projectKey=fgedu-architecture-optimization sonar.projectName=Architecture Optimization sonar.projectVersion=1.0 sonar.sources=src/main/java sonar.tests=src/test/java sonar.java.binaries=target/classes sonar.java.source=17 sonar.java.target=17 sonar.sourceEncoding=UTF-8 sonar.exclusions=**/target/**,**/build/** EOF $ sonar-scanner INFO: Scanner configuration file: /opt/sonar-scanner/conf/sonar-scanner.properties INFO: Project root configuration file: /data/projects/architecture-optimization/sonar-project.properties INFO: SonarScanner 4.8.0.2856 INFO: Java 17.0.7 Eclipse Adoptium (64-bit) INFO: Linux 5.15.0 amd64 INFO: User cache: /root/.sonar/cache INFO: Scanner configuration file: /opt/sonar-scanner/conf/sonar-scanner.properties INFO: Project root configuration file: /data/projects/architecture-optimization/sonar-project.properties INFO: Analyzing on SonarQube server 10.0.0 INFO: Default locale: "en_US", source code encoding: "UTF-8" INFO: Load global settings INFO: Load global settings (done) | time=123ms INFO: Server id: BF41A1F2-AX1234567890 INFO: User cache: /root/.sonar/cache INFO: Load/download plugins INFO: Load plugins index INFO: Load plugins index (done) | time=45ms INFO: Load/download plugins (done) | time=234ms INFO: Process project properties INFO: Process project properties (done) | time=12ms INFO: Execute project builders INFO: Execute project builders (done) | time=3ms INFO: Project key: fgedu-architecture-optimization INFO: Base dir: /data/projects/architecture-optimization INFO: Working dir: /data/projects/architecture-optimization/.scannerwork INFO: Load project settings for component key: 'fgedu-architecture-optimization' INFO: Load project settings for component key: 'fgedu-architecture-optimization' (done) | time=56ms INFO: Auto-configuring with CI 'Jenkins' INFO: Load quality profiles INFO: Load quality profiles (done) | time=78ms INFO: Load active rules INFO: Load active rules (done) | time=1234ms INFO: Indexing files... INFO: Project configuration: INFO: Excluded sources: **/target/**, **/build/** INFO: 45 files indexed INFO: 0 files ignored because of inclusion/exclusion patterns INFO: Quality profile for java: Sonar way INFO: ------------- Run sensors on module Architecture Optimization INFO: Load metrics repository INFO: Load metrics repository (done) | time=34ms INFO: Sensor JavaSquidSensor [java] INFO: Configured Java source version (sonar.java.source): 17 INFO: JavaClasspath initialization INFO: JavaClasspath initialization (done) | time=12ms INFO: JavaTestClasspath initialization INFO: JavaTestClasspath initialization (done) | time=8ms INFO: Java Main Files AST scan INFO: 45 source files to be analyzed INFO: 45/45 source files have been analyzed INFO: Java Main Files AST scan (done) | time=2345ms INFO: Java Test Files AST scan INFO: 12 source files to be analyzed INFO: 12/12 source files have been analyzed INFO: Java Test Files AST scan (done) | time=567ms INFO: Sensor JavaSquidSensor [java] (done) | time=3456ms INFO: Sensor SurefireSensor [java] INFO: parsing [/data/projects/architecture-optimization/target/surefire-reports] INFO: Sensor SurefireSensor [java] (done) | time=123ms INFO: Sensor JaCoCoSensor [java] INFO: Analysing /data/projects/architecture-optimization/target/jacoco.exec INFO: Sensor JaCoCoSensor [java] (done) | time=234ms INFO: Sensor JavaXmlSensor [java] INFO: Sensor JavaXmlSensor [java] (done) | time=45ms INFO: Sensor HTML [web] INFO: Sensor HTML [web] (done) | time=12ms INFO: Sensor XML Sensor [xml] INFO: Sensor XML Sensor [xml] (done) | time=8ms INFO: ------------- Run sensors on project INFO: Sensor Zero Coverage Sensor INFO: Sensor Zero Coverage Sensor (done) | time=23ms INFO: Sensor Java CPD Block Indexer INFO: Sensor Java CPD Block Indexer (done) | time=123ms INFO: SCM provider for this project is: git INFO: 45 files to be analyzed INFO: 45/45 files analyzed INFO: Calculating CPD for 45 files INFO: CPD calculation finished INFO: Analysis report generated in 234ms, dir size=234 KB INFO: Analysis report compressed in 123ms, zip size=123 KB INFO: Analysis report uploaded in 456ms INFO: ANALYSIS SUCCESSFUL, you can browse http://sonarqube.fgedu.net.cn:9000/dashboard?id=fgedu-architecture-optimization INFO: Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report INFO: More about the report processing at http://sonarqube.fgedu.net.cn:9000/api/ce/task?id=AX1234567890 INFO: Analysis total time: 12.345 s INFO: ------------------------------------------------------------------------ INFO: EXECUTION SUCCESS INFO: ------------------------------------------------------------------------ INFO: Total time: 15.678 s INFO: Final Memory: 45M/512M INFO: ------------------------------------------------------------------------

# 安全扫描
$ cat > security-scan.sh << 'EOF' #!/bin/bash # OWASP Dependency Check $OWASP_DC_PATH/bin/dependency-check.sh \ --project "Architecture Optimization" \ --scan ./target/*.jar \ --out ./reports \ --format ALL # 检查结果 if [ $? -eq 0 ]; then echo "Security scan completed successfully" cat ./reports/dependency-check-report.json | jq '.dependencies[] | select(.vulnerabilities | length > 0) | {fileName: .fileName, vulnerabilities: [.vulnerabilities[].name]}’
else
echo “Security scan failed”
exit 1
fi
EOF

$ chmod +x security-scan.sh
$ ./security-scan.sh
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (123 ms)
[INFO]

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (1 seconds)
[INFO] Finished Central Analyzer (2 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Sonatype OSS Index Analyzer (1 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (8 seconds)
[INFO] Writing report to: /data/projects/architecture-optimization/reports/dependency-check-report.html
Security scan completed successfully