M2ch6 3

.m2/settings.xml

@@ -0,0 +1,18 @@
+<settings>
+  <pluginGroups>
+    <pluginGroup>org.sonarsource.scanner.maven</pluginGroup>
+  </pluginGroups>
+  <profiles>
+    <profile>
+      <id>sonar</id>
+      <activation>
+        <activeByDefault>true</activeByDefault>
+      </activation>
+      <properties>
+        <sonar.host.url>
+          http://localhost:9000
+        </sonar.host.url>
+      </properties>
+    </profile>
+  </profiles>
+</settings>

Dockerfile

@@ -0,0 +1,13 @@
+FROM adoptopenjdk/openjdk11:alpine-jre
+
+ARG JAR_FILE=target/calculator.jar
+
+WORKDIR /opt/app
+
+COPY ${JAR_FILE} calculator.jar
+
+COPY entrypoint.sh entrypoint.sh
+
+RUN chmod 755 entrypoint.sh
+
+ENTRYPOINT ["./entrypoint.sh"]

Jenkinsfile

@@ -0,0 +1,122 @@
+def CONTAINER_NAME = "calculator"
+def ENV_NAME = getEnvName(env.BRANCH_NAME)
+def CONTAINER_TAG = getTag(env.BUILD_NUMBER, env.BRANCH_NAME)
+def HTTP_PORT = getHTTPPort(env.BRANCH_NAME)
+def EMAIL_RECIPIENTS = "[email protected]"
+
+
+node {
+    try {
+        stage('Initialize') {
+            def dockerHome = tool 'DockerLatest'
+            def mavenHome = tool 'MavenLatest'
+            env.PATH = "${dockerHome}/bin:${mavenHome}/bin:${env.PATH}"
+        }
+
+        stage('Checkout') {
+            checkout scm
+        }
+
+        stage('Build with test') {
+
+            sh "mvn clean install"
+        }
+
+        stage('Sonarqube Analysis') {
+            withSonarQubeEnv('SonarQubeLocalServer') {
+                sh " mvn sonar:sonar -Dintegration-tests.skip=true -Dmaven.test.failure.ignore=true"
+            }
+            timeout(time: 1, unit: 'MINUTES') {
+                def qg = waitForQualityGate() // Reuse taskId previously collected by withSonarQubeEnv
+                if (qg.status != 'OK') {
+                    error "Pipeline aborted due to quality gate failure: ${qg.status}"
+                }
+            }
+        }
+
+        stage("Image Prune") {
+            imagePrune(CONTAINER_NAME)
+        }
+
+        stage('Image Build') {
+            imageBuild(CONTAINER_NAME, CONTAINER_TAG)
+        }
+
+        stage('Push to Docker Registry') {
+            withCredentials([usernamePassword(credentialsId: 'DockerhubCredentials', usernameVariable: 'USERNAME', passwordVariable: 'PASSWORD')]) {
+                pushToImage(CONTAINER_NAME, CONTAINER_TAG, USERNAME, PASSWORD)
+            }
+        }
+
+        stage('Run App') {
+            withCredentials([usernamePassword(credentialsId: 'DockerhubCredentials', usernameVariable: 'USERNAME', passwordVariable: 'PASSWORD')]) {
+                runApp(CONTAINER_NAME, CONTAINER_TAG, USERNAME, HTTP_PORT, ENV_NAME)
+
+            }
+        }
+
+    } finally {
+        deleteDir()
+        sendEmail(EMAIL_RECIPIENTS);
+    }
+
+}
+
+def imagePrune(containerName) {
+    try {
+        sh "docker image prune -f"
+        sh "docker stop $containerName"
+    } catch (ignored) {
+    }
+}
+
+def imageBuild(containerName, tag) {
+    sh "docker build -t $containerName:$tag  -t $containerName --pull --no-cache ."
+    echo "Image build complete"
+}
+
+def pushToImage(containerName, tag, dockerUser, dockerPassword) {
+    sh "docker login -u $dockerUser -p $dockerPassword"
+    sh "docker tag $containerName:$tag $dockerUser/$containerName:$tag"
+    sh "docker push $dockerUser/$containerName:$tag"
+    echo "Image push complete"
+}
+
+def runApp(containerName, tag, dockerHubUser, httpPort, envName) {
+    sh "docker pull $dockerHubUser/$containerName"
+    sh "docker run --rm --env SPRING_ACTIVE_PROFILES=$envName -d -p $httpPort:$httpPort --name $containerName $dockerHubUser/$containerName:$tag"
+    echo "Application started on port: ${httpPort} (http)"
+}
+
+def sendEmail(recipients) {
+    mail(
+            to: recipients,
+            subject: "Build ${env.BUILD_NUMBER} - ${currentBuild.currentResult} - (${currentBuild.fullDisplayName})",
+            body: "Check console output at: ${env.BUILD_URL}/console" + "\n")
+}
+
+String getEnvName(String branchName) {
+    if (branchName == 'main') {
+        return 'prod'
+    } else if (branchName.startsWith("release-") || branchName.startsWith("hotfix-") || branchName == 'ready') {
+        return 'uat'
+    }
+    return 'dev'
+}
+
+String getHTTPPort(String branchName) {
+    if (branchName == 'main') {
+        return '9001'
+
+    } else if (branchName.startsWith("release-") || branchName.startsWith("hotfix-") || branchName == 'ready') {
+        return '9002'
+    }
+    return '9003'
+}
+
+String getTag(String buildNumber, String branchName) {
+    if (branchName == 'main') {
+        return buildNumber + '-unstable'
+    }
+    return buildNumber + '-stable'
+}

README.md

@@ -1,3 +1,191 @@
 # Dépôt des sources JAVA pour cours CICD 
 
-Sources accompagnant le cours "Continuous Integration, Continuous Delivery"
+
+
+1/ Préparer les machines distantes
+
+
+
+a/ Démarrer 2 machine linux
+
+
+i/
+docker run -it --name mysql-alpine-dev --rm alpine-ssh-server
+
+docker run -it --name mysql-alpine-uat --rm alpine-ssh-server
+
+Pour chacune des machines:
+
+Modifier le mot de passe root:
+
+	passwd 
+	my-secret-pw
+
+
+
+Démarrez le service ssh: 
+
+/etc/init.d/sshd restart
+
+
+Vérifier l'état du service SSH
+
+netstat -atunp 
+Si aucun service n'est en mode LISTEN sur le port 22 alors redémarrez
+
+
+Noter l'adresse IP de l'interface eth0: 
+ifconfig
+
+172.17.0.4
+
+172.17.0.5
+
+
+
+============ (pas nécessaire sauf si vous partez d'une machine alpine simple) ===========
+
+b/ Install OpenSSH et ses outils pour la communication via SSH  
+
+apk add python3
+apk add openssh
+apk add nano
+
+
+c/ Démarrer le serveur ssh: 
+
+	apk add openrc
+
+	rc-update add sshd
+
+	/etc/init.d/sshd start
+
+	touch /run/openrc/softlevel
+
+	/etc/init.d/sshd start
+
+	rc-status
+
+	netstat -atunp
+
+	--
+	nano /etc/ssh/sshd_config
+
+	Append (a)
+
+	PermitRootLogin Yes
+
+	exit(esc) => :wq
+
+	/etc/init.d/sshd restart
+	--
+
+Modifier le mot de passe root:
+
+	passwd 
+	my-secret-pw
+
+========================================================
+
+
+
+======== Pas nécessaire, je l'ai utilisée pour sauvegarder les machines déjà configurées ==================
+
+c/ Clone the previously created machine for the second machine
+
+docker commit d3e616f327a4 alpine-ssh-server
+
+
+docker tag alpine-ssh-server imzerofiltre/alpine-ssh-server
+
+docker push imzerofiltre/alpine-ssh-server
+
+=================================================
+
+
+
+
+2/ Préparer la machine de contrôle
+
+
+a/ Démarrer une machine linux
+
+docker run -it --name ansible-controller alpine
+
+
+
+
+b/ Install OpenSSH for SSH comminucation between the remote and the controller
+
+	apk add openssh
+
+
+
+Ajouter les clés de chaque machine en tant que serveurs connus
+
+ssh @IP machine distante
+
+
+c/ Générer une paire de clé privé/publique à utiliser en lieu et place du mot de passe
+
+
+
+	ssh-keygen
+	(Utiliser les valeurs par défaut en tapant juste entrer jusqu'à la fin)
+
+
+c/ Importer la clé publique SSH de la machine de contrôle:
+
+	ssh-copy-id @IP machine distante
+
+	ssh @IP machine distante	=> désormais plus de clé demandée.
+
+b/ Installer Ansible
+
+	apk add ansible
+
+	Vérifier l'installation avec: 
+
+	ansible --version
+
+
+
+
+d/ Définissions l'inventaire (inventory)
+
+apk add nano
+
+mkdir /etc/ansible 
+nano /etc/ansible/host
+
+
+[database]
+172.17.0.9
+172.17.0.10
+
+
+Ecrire le playbook
+
+nano /etc/ansible/install-db.yaml
+
+- name: install db servers play
+  hosts: databases
+  tasks:
+  - name: Install server and client
+    command: apk add mysql mysql-client
+
+  - name: Pause 10 seconds for installation process to finish
+    pause: seconds=10
+
+  - name: Setup database
+    command: /etc/init.d/mariadb setup
+
+  - name: Start the server
+    command: /etc/init.d/mariadb start
+
+
+
+Démarrer le playbook :
+
+ansible-playbook -i /etc/ansible/host /etc/ansible/install-db.yaml
+

entrypoint.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+
+echo "The app is starting ..."
+exec java -jar -Dspring.profiles.active=${SPRING_ACTIVE_PROFILES} "calculator.jar"