pipline中执行shell脚本推送镜像并且部署

实验架构：

192.168.0.96    gitlab

192.168.0.97    jenkins

192.168.0.98    harbor、docker集群


说明：下面代码编译镜像那一步的代码必须靠左，目的是不要有空格，否则报错，deploy那一步也必须是那种格式，否则报错

安装完jenkins后首先生成pipeline可以用的git链接地址，参照下面连接，看里面的第7步

https://www.cnblogs.com/effortsing/p/10468840.html


pipline脚本如下：

pipeline {
    agent any
    stages {
        stage('git checkout'){
            steps {
                echo 'git clone'
                checkout([$class: 'GitSCM', branches: [[name: '*/master']], doGenerateSubmoduleConfigurations: false, extensions: [], submoduleCfg: [], userRemoteConfigs: [[credentialsId: 'c32a3a24-2c9d-4c8d-b456-9d6d0badf3a2', url: 'http://192.168.0.96:8081/zihao/test.git']]])
            }
        }
        stage('maven build'){
            steps {
                echo 'maven build'
                    sh '''
                export JAVA_HOME=/usr/local/jdk1.8.0_171/
                     /usr/local/apache-maven-3.5.4/bin/mvn clean package -Dmaven.test.skip=true
                '''
            }
        }

        stage('docker build and push images'){
            steps {
echo 'docker build and push images'
sh '''
REPOSITORY=192.168.0.98:5000/library/solo/solo:${Tag}
cat >Dockerfile<<EOF
FROM 192.168.0.98:5000/library/tomcat-85:latest
RUN rm -rf /usr/local/tomcat/webapps/ROOT/
COPY target/*.war /usr/local/tomcat/webapps/ROOT.war
WORKDIR /usr/local/tomcat
EXPOSE 8080
CMD ["./bin/catalina.sh", "run"]
EOF
docker build -t $REPOSITORY .
docker login -u admin -p Harbor12345 192.168.0.98:5000
docker push $REPOSITORY
'''
            }
            }

        stage('deploy'){
            steps {
echo 'deploy'
sh '''
REPOSITORY=192.168.0.98:5000/library/solo/solo:${Tag}
cat >deploy.sh<<EOF
#!/bin/bash
ssh root@192.168.0.98 'docker container run -d --name blog-solo-2 -v /opt:/opt -p 89:8080 $REPOSITORY'
EOF
chmod +x deploy.sh
sh deploy.sh
'''
            }
            }

    }
}


说明：远程执行命令前提需要安装ssh agent插件，

现在ssh agent的认证，已不支持明文用户密码，而只能用加密方式实现。

所以先在jenknis和docker集群之间实现ssh免密码rsa证书登陆。

私钥放jenkins，公钥放在docker集群，然后，将私钥拿出来，写入到jenkins凭据

参照：https://blog.csdn.net/weixin_34067980/article/details/86444168



脚本参照：

https://blog.csdn.net/jackyzhousales/article/details/81713004

https://blog.csdn.net/a1010256340/article/details/83989059


生成pipeline可以用的git链接地址参照：

https://www.cnblogs.com/FRESHMANS/p/8184874.html