598e2a3b25
与 portal 同款修复：Harbor 私有仓库 cd-target pull 需先登录。 withCredentials 拿 harbor-credentials，ssh 传到远程执行 docker login（stdin 传密码，不进 history）。
91 lines
3.9 KiB
Groovy
91 lines
3.9 KiB
Groovy
// BuildFlow buildflow-api CI/CD
|
||
// 链路：①拉取代码 → ②编译打包(docker build) → 推送 Harbor → ③部署(cd-target SSH) → HealthCheck
|
||
// 注：飞书通知逻辑已移除（凭证未配齐）；部署通过 ssh 直连 cd-target 执行。
|
||
// api 运行依赖：PostgreSQL(5库) / Redis / MongoDB(im_system) / RabbitMQ / S3(RustFS) / 本地LLM(1234) / KKFileView(8012)
|
||
|
||
pipeline {
|
||
agent any
|
||
environment {
|
||
HARBOR = "43.134.235.58:58080"
|
||
IMAGE = "${HARBOR}/buildflow/buildflow-api"
|
||
TAG = "${env.BUILD_NUMBER}"
|
||
// Jenkins 容器内无 ssh 别名，直接用 IP；ubuntu 用户 sudo 免密（NOPASSWD）
|
||
DEPLOY_HOST = "ubuntu@110.42.240.10"
|
||
APP_PORT = "5667"
|
||
}
|
||
options {
|
||
timeout(time: 30, unit: "MINUTES")
|
||
buildDiscarder(logRotator(numToKeepStr: "10"))
|
||
}
|
||
stages {
|
||
stage("① 拉取代码") {
|
||
steps {
|
||
checkout scm
|
||
sh "git log --oneline -3"
|
||
}
|
||
}
|
||
stage("② 编译打包") {
|
||
steps {
|
||
sh "docker build -t ${IMAGE}:${TAG} -t ${IMAGE}:latest ."
|
||
sh "docker images | grep ${IMAGE} | head -2"
|
||
}
|
||
}
|
||
stage("推送 Harbor") {
|
||
steps {
|
||
withCredentials([usernamePassword(credentialsId: "harbor-credentials", usernameVariable: "HUSER", passwordVariable: "HPASS")]) {
|
||
sh '''
|
||
echo $HPASS | docker login $HARBOR -u $HUSER --password-stdin
|
||
docker push $IMAGE:$TAG
|
||
docker push $IMAGE:latest
|
||
docker logout $HARBOR
|
||
'''
|
||
}
|
||
}
|
||
}
|
||
stage("③ 部署") {
|
||
steps {
|
||
script {
|
||
try {
|
||
withCredentials([usernamePassword(credentialsId: "harbor-credentials", usernameVariable: "HUSER", passwordVariable: "HPASS")]) {
|
||
sh """
|
||
ssh -o StrictHostKeyChecking=accept-new ${DEPLOY_HOST} "
|
||
echo '${HPASS}' | sudo docker login ${HARBOR} -u ${HUSER} --password-stdin
|
||
sudo docker pull ${IMAGE}:latest
|
||
sudo docker rm -f buildflow-api 2>/dev/null || true
|
||
sudo docker run -d --name buildflow-api --restart unless-stopped -p ${APP_PORT}:${APP_PORT} ${IMAGE}:latest
|
||
"
|
||
"""
|
||
}
|
||
echo "部署完成"
|
||
} catch (e) {
|
||
echo "警告：部署节点 ${DEPLOY_HOST} 暂不可用，跳过自动部署（镜像已推送 Harbor）。原因：${e.getMessage()}"
|
||
}
|
||
}
|
||
}
|
||
}
|
||
stage("HealthCheck") {
|
||
steps {
|
||
script {
|
||
try {
|
||
sh """
|
||
sleep 8
|
||
ssh -o StrictHostKeyChecking=accept-new ${DEPLOY_HOST} 'wget -q --spider http://127.0.0.1:${APP_PORT}/health || wget -q --spider http://127.0.0.1:${APP_PORT}/ && echo HEALTHCHECK_OK'
|
||
"""
|
||
echo "=== HealthCheck OK: api http://110.42.240.10:${APP_PORT} ==="
|
||
} catch (e) {
|
||
echo "警告：HealthCheck 探测失败（容器可能仍在启动，或依赖的 PG/Redis/Mongo 未就绪）。镜像已推送 Harbor，可手动检查。"
|
||
}
|
||
}
|
||
}
|
||
}
|
||
}
|
||
post {
|
||
success { echo '=== buildflow-api CI/CD SUCCESS ===' }
|
||
failure { echo '=== buildflow-api CI/CD FAILED ===' }
|
||
always {
|
||
sh "docker rmi ${IMAGE}:${TAG} ${IMAGE}:latest 2>/dev/null || true"
|
||
deleteDir()
|
||
}
|
||
}
|
||
}
|