Jenkins流水线Java项目CI/CD实战：从构建到自动部署

Jenkinsfile

// Jenkinsfile
pipeline {
    agent {
        docker {
            image 'maven:3.8.5-openjdk-11' // 使用Docker镜像提供一致的构建环境
            args '-v /var/run/docker.sock:/var/run/docker.sock' // 允许容器内执行Docker命令
        }
    }
    environment {
        // 定义一些环境变量，便于后续使用
        PROJECT_NAME = 'my-java-app'
        DOCKER_REGISTRY = 'your-docker-registry.com' // 替换为你的Docker仓库地址
        DEPLOY_HOST = 'your-remote-server-ip' // 替换为你的部署目标服务器IP
        DEPLOY_USER = 'deployuser' // 替换为部署用户
        DEPLOY_PATH = '/opt/apps/my-java-app' // 部署路径
    }
    stages {
        stage('Checkout Code') {
            steps {
                echo 'Checking out source code...'
                git branch: 'main', credentialsId: 'your-git-credentials-id' // 替换为你的Git凭据ID
            }
        }

        stage('Build & Test') {
            steps {
                echo 'Building Java project with Maven...'
                sh 'mvn clean package -DskipTests' // 先构建，跳过单元测试以加快反馈
                // 实际项目中，通常会有一个单独的测试阶段
            }
        }

        stage('Run Unit Tests') {
            steps {
                echo 'Running unit tests...'
                sh 'mvn test' // 执行单元测试
                junit '**/target/surefire-reports/*.xml' // 发布JUnit测试报告
            }
        }

        stage('Static Code Analysis') {
            steps {
                echo 'Performing SonarQube analysis...'
                // 假设你已配置SonarQube Scanner
                withSonarQubeEnv('SonarQube') { // 替换为你的SonarQube服务器配置名称
                    sh 'mvn sonar:sonar'
                }
            }
        }

        stage('Build Docker Image') {
            steps {
                echo 'Building Docker image...'
                script {
                    def appVersion = sh(returnStdout: true, script: "mvn help:evaluate -Dexpression=project.version -q -DforceStdout").trim()
                    def commitId = sh(returnStdout: true, script: 'git rev-parse --short HEAD').trim()
                    // 假设你的项目根目录有一个Dockerfile
                    sh "docker build -t ${DOCKER_REGISTRY}/${PROJECT_NAME}:${appVersion}-${commitId} ."
                    sh "docker tag ${DOCKER_REGISTRY}/${PROJECT_NAME}:${appVersion}-${commitId} ${DOCKER_REGISTRY}/${PROJECT_NAME}:latest"
                }
            }
        }

        stage('Push Docker Image') {
            steps {
                echo 'Pushing Docker image to registry...'
                script {
                    def appVersion = sh(returnStdout: true, script: "mvn help:evaluate -Dexpression=project.version -q -DforceStdout").trim()
                    def commitId = sh(returnStdout: true, script: 'git rev-parse --short HEAD').trim()
                    withCredentials([usernamePassword(credentialsId: 'your-docker-registry-credentials-id', usernameVariable: 'DOCKER_USERNAME', passwordVariable: 'DOCKER_PASSWORD')]) {
                        sh "echo \$DOCKER_PASSWORD | docker login ${DOCKER_REGISTRY} -u \$DOCKER_USERNAME --password-stdin"
                        sh "docker push ${DOCKER_REGISTRY}/${PROJECT_NAME}:${appVersion}-${commitId}"
                        sh "docker push ${DOCKER_REGISTRY}/${PROJECT_NAME}:latest"
                    }
                }
            }
        }

        stage('Deploy to Server') {
            when {
                branch 'main' // 只在主分支合并时触发部署
            }
            steps {
                echo "Deploying to ${DEPLOY_HOST}..."
                // 使用SSH插件或者直接sh 'ssh'命令进行部署
                // 这里以一个简单的SSH命令为例，实际生产中可能更复杂，例如滚动更新
                withCredentials([sshUserPrivateKey(credentialsId: 'your-ssh-credentials-id', keyFileVariable: 'SSH_KEY')]) {
                    sh """
                        ssh -i \$SSH_KEY ${DEPLOY_USER}@${DEPLOY_HOST} << EOF
                        mkdir -p ${DEPLOY_PATH}
                        docker pull ${DOCKER_REGISTRY}/${PROJECT_NAME}:latest
                        docker stop ${PROJECT_NAME} || true
                        docker rm ${PROJECT_NAME} || true
                        docker run -d --name ${PROJECT_NAME} -p 8080:8080 ${DOCKER_REGISTRY}/${PROJECT_NAME}:latest
                        echo "Deployment complete."
                        EOF
                    """
                }
            }
        }
    }

    post {
        always {
            cleanWs() // 清理工作区
        }
        failure {
            echo 'Pipeline failed. Check logs for details.'
            // 可以添加发送通知的步骤，例如邮件或Slack
        }
        success {
            echo 'Pipeline completed successfully!'
            // 可以添加发送通知的步骤
        }
    }
}

maven:3.8.5-openjdk-11

Jenkinsfile