持续集成与自动化部署 - jenkins sonar代码质量管理平台部署和基础使用（五）...

1 jenkins

安装参考链接

1.1 安装jenkins

[root@test-node3 ~]# yum install -y java-1.8.0
[root@test-node3 ~]# cd /etc/yum.repos.d/
[root@test-node3 yum.repos.d]# wget http://pkg.jenkins.io/redhat/jenkins.repo
[root@test-node3 yum.repos.d]# rpm --import http://pkg.jenkins.io/redhat/jenkins.io.key
[root@test-node3 yum.repos.d]# yum install -y jenkins
[root@test-node3 yum.repos.d]# systemctl start jenkins

1.2 安装jenkins插件

[root@test-node3 ~]# cat /var/lib/jenkins/secrets/initialAdminPassword
d71307d2e9764f428d853bc49ac6b5ea

选择默认安装，会安装通用的插件，剩下的在需要用的的时候再安装。

等待安装完成

设置用户名密码
user:admin
key: 123..abc

1.3 新建一个任务

[root@test-node3 ~]# usermod -s /bin/bash jenkins-bash-4.2$ ssh-copy-id -i .ssh/id_rsa.pub www@10.0.0.204
The authenticity of host '10.0.0.204 (10.0.0.204)' can't be established.
ECDSA key fingerprint is cd:9c:13:52:1a:96:c6:2b:4c:0c:5a:83:f6:94:01:48.
Are you sure you want to continue connecting (yes/no)? yes
/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
www@10.0.0.204's password: Number of key(s) added: 1Now try logging into the machine, with:   "ssh 'www@10.0.0.204'"
and check to make sure that only the key(s) you wanted were added.-bash-4.2$
-bash-4.2$ ssh www@10.0.0.204
Last login: Wed Apr 12 09:33:40 2017
[www@salt-node4 ~]$
[www@salt-node4 ~]$ logout
Connection to 10.0.0.204 closed.

测试
点击立即构建

自动部署完成。

1.4 jenkins安装gitlab插件

注：jenkins填写的是私钥（gitlab服务器上填写的是公钥 - 步骤同gitlab添加ssh 公钥，jenkins用ssh协议到gitlab上面去拉取代码。）

2. 代码质量管理 - sonar

Sonar 是一个用于代码质量管理的开放平台。通过插件机制，Sonar 可以集成不同的测试工具，代码分析工具，以及持续集成工具。与持续集成工具（例如 Hudson/Jenkins 等）不同，Sonar 并不是简单地把不同的代码检查工具结果（例如 FindBugs，PMD 等）直接显示在 Web 页面上，而是通过不同的插件对这些结果进行再加工处理，通过量化的方式度量代码质量的变化，从而可以方便地对不同规模和种类的工程进行代码质量管理。
在对其他工具的支持方面，Sonar 不仅提供了对 IDE 的支持，可以在 Eclipse 和 IntelliJ IDEA 这些工具里联机查看结果；同时 Sonar 还对大量的持续集成工具提供了接口支持，可以很方便地在持续集成中使用 Sonar。
此外，Sonar 的插件还可以对 Java 以外的其他编程语言提供支持，对国际化以及报告文档化也有良好的支持

2.1 部署sonar

注：1 sonar 需要安装数据库版本为mysql 5.6及以上。 2 需要java环境，java版本为1.8以上

mysql 5.6 Yum源
https://repo.mysql.com/mysql-community-release-el7-5.noarch.rpm
yum -y install  mysql-community-server

[sonar部署参考链接] (https://www.unixhot.com/article/56)

2.1.1 下载安装 sonar源码

[root@test-node3 ~]# cd /server/tools/
[root@test-node3 ~]# wget https://sonarsource.bintray.com/Distribution/sonarqube/sonarqube-5.6.zip
[root@test-node3 tools]#  unzip sonarqube-5.6.zip
[root@test-node3 tools]# mv sonarqube-5.6 /usr/local/
[root@test-node3 tools]# ln -s /usr/local/sonarqube-5.6/ /usr/local/sonarqube

2.1.2 准备Sonar数据库

CREATE DATABASE sonar CHARACTER SET utf8 COLLATE utf8_general_ci;
GRANT ALL ON sonar.* TO 'sonar'@'localhost' IDENTIFIED BY 'sonar@pw';
GRANT ALL ON sonar.* TO 'sonar'@'%' IDENTIFIED BY 'sonar@pw';
FLUSH PRIVILEGES;

[root@test-node3 ~]# mysql
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 2
Server version: 5.6.36 MySQL Community Server (GPL)Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved.Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.mysql> CREATE DATABASE sonar CHARACTER SET utf8 COLLATE utf8_general_ci;
Query OK, 1 row affected (0.01 sec)mysql> GRANT ALL ON sonar.* TO 'sonar'@'localhost' IDENTIFIED BY 'sonar@pw';
GRANT ALL ON sonar.* TO 'sonar'@'%' IDENTIFIED BY 'sonar@pw';
Query OK, 0 rows affected (0.06 sec)mysql> GRANT ALL ON sonar.* TO 'sonar'@'%' IDENTIFIED BY 'sonar@pw';
Query OK, 0 rows affected (0.00 sec)mysql> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.01 sec)mysql>

2.1.3 配置Sonar

[root@test-node3 tools]# cd /usr/local/sonarqube/conf/
[root@test-node3 conf]# vim sonar.properties
sonar.jdbc.username=sonar
sonar.jdbc.password=sonar@pw
sonar.jdbc.url=jdbc:mysql://localhost:3306/sonar?useUnicode=true&characterEncoding=utf8&rewriteBatchedStatements=true&useConfigs=maxPerformance

2.1.4 启动Sonar

如果没有正常启动，查看日志一般就可以解决。

可以在Sonar的配置文件来配置Sonar Web监听的IP地址和端口，默认是9000端口。

[root@test-node3 conf]# vim sonar.properties
sonar.web.host=0.0.0.0
sonar.web.port=9000[root@test-node3 conf]# /usr/local/sonarqube/bin/linux-x86-64/sonar.sh start
[root@test-node3 logs]# netstat -tnlpua|grep 9000
tcp        0      0 0.0.0.0:9000            0.0.0.0:*               LISTEN      44042/java

2.2 安装语言插件

分析什么语言就下载对应的语言插件。

web界面用户名密码，默认为：admin/admin

步骤：
方法一 web界面安装

Administration --> System -->  Update Center --> Available  搜索chiness Pack 点击install。安装完成之后需要重启sonar
[root@test-node3 plugins]# /usr/local/sonarqube/bin/linux-x86-64/sonar.sh restart

方法二下载jar包进行替换
下载的连接可以根据在web界面安装插件的失败提醒来下载，如果不能下载，用迅雷下载。

https://github.com/SonarQubeCommunity/sonar-l10n-zh/releaseshttps://github.com/SonarQubeCommunity/sonar-l10n-zh/releases/download/sonar-l10n-zh-plugin-1.11/sonar-l10n-zh-plugin-1.11.jar
下载到/usr/local/sonarqube/extensions/plugins目录需要重启才能生效
[root@test-node3 plugins]# /usr/local/sonarqube/bin/linux-x86-64/sonar.sh restart

2.3 安装sonar 代码扫描工具插件

参考链接

2.3.1 下载安装源码文件

[root@test-node3 plugins]# cd /server/tools/
[root@test-node3 tools]# wget https://sonarsource.bintray.com/Distribution/sonar-scanner-cli/sonar-scanner-2.6.1.zip
[root@test-node3 tools]# cp -rf sonar-scanner-2.6.1 /usr/local/sonar-scanner

2.3.2 修改配置文件

[root@test-node3 tools]# cd /usr/local/sonar-scanner/conf
[root@test-node3 conf]# cat sonar-scanner.properties #----- Default SonarQube server
sonar.host.url=http://localhost:9000#----- Default source code encoding
sonar.sourceEncoding=UTF-8#----- Global database settings (not used for SonarQube 5.2+)
sonar.jdbc.username=sonar
sonar.jdbc.password=sonar@pw#----- MySQL
sonar.jdbc.url=jdbc:mysql://localhost:3306/sonar?useUnicode=true&characterEncoding=utf8

2.3.3 下载测试代码进行扫描

扫描的是php语言，因此需要php语言的插件SonarPHP

[root@test-node3 tools]# unzip sonar-examples-4.5.zip
[root@test-node3 tools]#  cd /server/tools/sonar-examples-4.5/projects/languages/php/php-sonar-runner[root@test-node3 php-sonar-runner]# /usr/local/sonar-scanner/bin/sonar-scanner
.....
INFO: Sensor PHP sensor
INFO: 1 source files to be analyzed
INFO: 1/1 source files have been analyzed
INFO: No PHPUnit test report provided (see 'sonar.php.tests.reportPath' property)
INFO: No PHPUnit unit test coverage report provided (see 'sonar.php.coverage.reportPath' property)
INFO: No PHPUnit integration test coverage report provided (see 'sonar.php.coverage.itReportPath' property)
INFO: No PHPUnit overall coverage report provided (see 'sonar.php.coverage.overallReportPath' property)
INFO: Sensor PHP sensor (done) | time=1030ms
INFO: Sensor Analyzer for "php.ini" files
INFO: Sensor Analyzer for "php.ini" files (done) | time=6ms
INFO: Sensor Zero Coverage Sensor
INFO: Sensor Zero Coverage Sensor (done) | time=24ms
INFO: Sensor Code Colorizer Sensor
INFO: Sensor Code Colorizer Sensor (done) | time=1ms
INFO: Sensor CPD Block Indexer
INFO: DefaultCpdBlockIndexer is used for php
INFO: Sensor CPD Block Indexer (done) | time=0ms
INFO: Calculating CPD for 1 files
INFO: CPD calculation finished
INFO: Analysis report generated in 265ms, dir size=22 KB
INFO: Analysis reports compressed in 14ms, zip size=9 KB
INFO: Analysis report uploaded in 472ms
INFO: ANALYSIS SUCCESSFUL, you can browse http://localhost:9000/dashboard/index/org.sonarqube:php-simple-sq-scanner
INFO: Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
INFO: More about the report processing at http://localhost:9000/api/ce/task?id=AVthpV-GZk_1lOkjIdp8
INFO: ------------------------------------------------------------------------
INFO: EXECUTION SUCCESS
INFO: ------------------------------------------------------------------------
INFO: Total time: 16.131s
INFO: Final Memory: 43M/117M

注意：这里面有一个文件需要定义的，告诉sonar 语言，版本，及相关。

[root@test-node3 php-sonar-runner]# cat sonar-project.properties
# Required metadata
sonar.projectKey=org.sonarqube:php-simple-sq-scanner
sonar.projectName=PHP :: Simple Project :: SonarQube Scanner
sonar.projectVersion=1.0# Comma-separated paths to directories with sources (required)
sonar.sources=src# Language
sonar.language=php# Encoding of the source files
sonar.sourceEncoding=UTF-8

转载于:https://blog.51cto.com/damaicha/2118745