One

主题

One2024-12-24
1938
10m
Get...

harbor ci-cd ​

CI流水线中制品库集成 ​

镜像规范 ​

业务/服务:commitId

镜像上传 ​

bash
dockerlogin192.168.1.200:8088Username:adminPassword:WARNING!Yourpasswordwillbestoredunencryptedin/root/.docker/config.json.Configureacredentialhelpertoremovethiswarning.Seehttps:LoginSucceededdockertagnginx:1.9.1192.168.1.200:8088/devops03/devops03-maven-service:1.9.1dockerpush192.168.1.200:8088/devops03/devops03-maven-service:1.9.1

镜像下载 ​

bash
dockerpull192.168.1.200:8088/devops03/devops03-maven-service:1.9.1

CI流水线集成 ​

💘 实践：harbor CI流水线中制品库集成(测试成功)-2022.6.25

1.Jenkins ​

groovy
pipeline {agent {label "build"}stages {stage("DockerBuild"){steps{script{imageName ="${env.buName}/${env.serviceName}"imageTag ="${env.branchName}-${env.commitID}"sh """#登录镜像仓库docker login -u admin -p Harbor12345 192.168.1.200:8088# 构建镜像docker build -t 192.168.1.200:8088/${imageName}:${imageTag} .# 上传镜像docker push 192.168.1.200:8088/${imageName}:${imageTag}# 删除镜像sleep 2docker rmi 192.168.1.200:8088/${imageName}:${imageTag}"""}}}}}}
  • 我们先手动上传下镜像到harbor里：

自己的构建机器要配置下这个：

image-20220625093812765

image-20220622195053609

  • 来到devops4-maven-service项目，创建一个dockerfile:

image-20220622125010468

  • 先给它加进去看下效果：

来到devops4-maven-service，给它创建一个Dockerfile文件：

image-20220622204230686

再将本次代码拷贝到共享库里，看下效果：

image-20220625093948367

  • 构建并观察效果

image-20220625094016308

image-20220625094056616

符合预期。😘

2.GitLabCI ​

groovy
.dockerbuild:tags:-"${RUNNER_TAG}"stage:dockerbuildrules:-if:'$RUN_TYPE =="CI"'when:always-when:neverscript:|-imageName=${CI_PROJECT_ROOT_NAMESPACE}/${CI_PROJECT_NAME}:${CI_COMMIT_BRANCH}-${CI_COMMIT_SHORT_SHA}#登录镜像仓库docker login -u admin -p Harbor12345192.168.1.200:8088# 构建镜像docker build -t 192.168.1.200:8088/${imageName} .# 上传镜像docker push 192.168.1.200:8088/${imageName}# 删除镜像sleep 2docker rmi 192.168.1.200:8088/${imageName}

📍 自己测试过程：

  • 配置代码：

我这里为啥报了这个错误呢？

串行和并行都测试过了的啊：

image-20220622223135142

估计是自己的gitlab-runner用户权限不对，这里在上面配置上sudo：

image-20220622223239055

再次尝试就可以了。。

记得上次老师没做过这个配置啊……

  • 并行测试：

image-20220625095136020

image-20220625095115653

奇怪啊，老师，当时记得是并行测试时有问题的……

image-20220622224015158

  • 串行测试：

image-20220625094806647

image-20220622223051587

image-20220622223113240

image-20220625094710138

image-20220625094722925

注意：因为前面jenkins那里已经上传了一个相同镜像，所以这里只显示为一个；

image-20220625094732707

符合预期。😘

🍀 问题

  • 问题现象

之前老版本harbor测试，都没报这个错误来着的；

新版本测试，为啥报这个错误了呢？

jenkins上都可以正常推送上去，但是gitlab-CI就有问题了；

image-20220624083013179

image-20220624082349516

We trust you have received the usual lecture from the local System

18Administrator. It usually boils down to these three things:

19 #1) Respect the privacy of others.

20 #2) Think before you type.

21 #3) With great power comes great responsibility.

22sudo:no tty present and no askpass program specified

image-20220624083222447

  • 这里测试都是可以使用sudo命令的啊……

image-20220624082625679

  • 最后发现，串行测试没问题，但是并行测试一直报这个错误……奇怪

Harbor REST API ​

http:pipeline {agent {label "build"}stages{stage("GetTags"){steps{script{env.projectName ="acmp"env.repoName ="acmp-nginx-service"env.result =GetArtifactTag(env.projectName,env.repoName)env.result =env.result -'['-']'}}}stage("Clean"){steps{script{defresult =input message:"是否删除${env.projectName}项目的${env.repoName}这些标签：",parameters:[extendedChoice(defaultValue:"${env.result}",multiSelectDelimiter:',',name:'taga',quoteValue:false,saveJSONParameterToFile:false,type:'PT_CHECKBOX',value:"${env.result}",visibleItemCount:20)]println("${result}")for(t inresult.split(',')){println("Delete >>>>"+t.trim())DeleteArtifactTag(env.projectName,env.repoName,t.trim())}}}}}}defDeleteArtifactTag(projectName,repoName,tagName){harborAPI ="http:apiURL ="artifacts/${tagName}/tags/${tagName}"sh """curl -X DELETE "${harborAPI}/${apiURL}"-H "accept:application/json"-u admin:Harbor12345 """}defGetArtifactTag(projectName,repoName){harborAPI ="http:apiURL ="artifacts?page=1&page_size=10"response =sh returnStdout:true,script:"""curl -X GET "${harborAPI}/${apiURL}"-H "accept:application/json"-u admin:Harbor12345 """response =readJSON text:"""${response - "\n"}"""tags =[]for(t inresponse[0].tags){tags <<t.name}returntags}

最终效果：【Harbor镜像已经清空了】

image-20220622225105218

📍 自己测试过程：

image-20220622225247292

然后在jenkins里跑一次流水线：

image-20220622225353117

image-20220625095502517

相同的镜像，harbor就自动给你归类了：

image-20220622225554432

image-20220622225621449

image-20220625095611789

devops4-clean-harbor

image-20220623141411891

image-20220623141351548

image-20220623141402534

image-20220625100829901

image-20220625095746943

点击这个Input requested：

image-20220625095816020

image-20220625095837790

老师这里当时好像也是只选择了一个镜像，次问题暂且搁置吧……🤣

image-20220625095921089

这里只是把tag给去掉了：

image-20220625095951183

但是，再跑一次的话就会报错……

image-20220625100035069

实验结束。

本次完整代码如下：

groovy
importgroovy.json.JsonSlurperpipeline {agent {label "build"}stages{stage("GetTags"){steps{script{env.projectName ="${env.repoName}".split("-")[0]env.result =GetArtifactTag(env.projectName,env.repoName)env.result =env.result -'['-']'}}}stage("Clean"){steps{script{defresult =input message:"是否删除${env.projectName}项目的${env.repoName}这些标签：",parameters:[extendedChoice(defaultValue:"${env.result}",multiSelectDelimiter:',',name:'taga',quoteValue:false,saveJSONParameterToFile:false,type:'PT_CHECKBOX',value:"${env.result}",visibleItemCount:20)]println("${result}")for(t inresult.split(',')){println("Delete >>>>"+t.trim())DeleteArtifactTag(env.projectName,env.repoName,t.trim())}}}}}}defDeleteArtifactTag(projectName,repoName,tagName){harborAPI ="http:apiURL ="artifacts/${tagName}/tags/${tagName}"sh """curl -X DELETE "${harborAPI}/${apiURL}"-H "accept:application/json"-u admin:Harbor12345 """}defGetArtifactTag(projectName,repoName){harborAPI ="http:apiURL ="artifacts?page=1&page_size=10"response =sh returnStdout:true,script:"""curl -X GET "${harborAPI}/${apiURL}"-H "accept:application/json"-u admin:Harbor12345 """response =readJSON text:"""${response - "\n"}"""tags =[]for(t inresponse[0].tags){tags <<t.name}returntags}

注意：harbor是自带镜像删除策略的 ​

image-20220623082730430

image-20220625100917874

最近更新