Compare commits
5 Commits
ac8b4fbd4a
...
f2f1e9de54
| Author | SHA1 | Date | |
|---|---|---|---|
|
f2f1e9de54 | ||
|
|
08461d4f86 | ||
|
|
d7ed416df3 | ||
|
|
99aad766f9 | ||
| d13b8c6a54 |
146
Jenkinsfile
vendored
146
Jenkinsfile
vendored
@@ -1,146 +0,0 @@
|
||||
pipeline {
|
||||
agent {
|
||||
label 'puppet'
|
||||
}
|
||||
|
||||
post {
|
||||
always {
|
||||
deleteDir() /* clean up our workspace */
|
||||
}
|
||||
success {
|
||||
updateGitlabCommitStatus state: 'success'
|
||||
}
|
||||
failure {
|
||||
updateGitlabCommitStatus state: 'failed'
|
||||
step([$class: 'Mailer', notifyEveryUnstableBuild: true, recipients: 'support@confdroid.com', sendToIndividuals: true])
|
||||
}
|
||||
}
|
||||
|
||||
options {
|
||||
gitLabConnection('gitlab.confdroid.com')
|
||||
}
|
||||
|
||||
stages {
|
||||
|
||||
stage('pull master') {
|
||||
steps {
|
||||
sshagent(['edd05eb6-26b5-4c7b-a5cc-ea2ab899f4fa']) {
|
||||
sh '''
|
||||
git config user.name "Jenkins Server"
|
||||
git config user.email jenkins@confdroid.com
|
||||
git fetch origin
|
||||
source_branch="${gitlabSourceBranch:-${BRANCH_NAME:-${GIT_LOCAL_BRANCH:-$GIT_BRANCH}}}"
|
||||
source_branch="${source_branch#origin/}"
|
||||
source_branch="${source_branch#refs/heads/}"
|
||||
if [ -z "$source_branch" ]; then
|
||||
source_branch="development"
|
||||
fi
|
||||
echo "Using source branch: $source_branch"
|
||||
# Create an isolated build branch from the triggering branch revision.
|
||||
git checkout -B jenkins-build-$BUILD_NUMBER "origin/$source_branch"
|
||||
# Merge the current master into the build branch before validation.
|
||||
git merge origin/master --no-ff || { echo "Merge conflict detected"; exit 1; }
|
||||
'''
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('puppet parser') {
|
||||
steps {
|
||||
sh '''for file in $(find . -iname \'*.pp\'); do
|
||||
/opt/puppetlabs/bin/puppet parser validate --color false --render-as s --modulepath=modules $file || exit 1;
|
||||
done;'''
|
||||
}
|
||||
}
|
||||
|
||||
stage('check templates') {
|
||||
steps{
|
||||
sh '''for file in $(find . -iname \'*.erb\');
|
||||
do erb -P -x -T "-" $file | ruby -c || exit 1;
|
||||
done;'''
|
||||
}
|
||||
}
|
||||
|
||||
stage('puppet-lint') {
|
||||
steps {
|
||||
sh '''/usr/local/bin/puppet-lint . \\
|
||||
--no-variable_scope-check \\
|
||||
|| { echo "Puppet lint failed"; exit 1; }
|
||||
'''
|
||||
}
|
||||
}
|
||||
|
||||
stage('SonarScan') {
|
||||
steps {
|
||||
withCredentials([string(credentialsId: 'sonar-token', variable: 'SONAR_TOKEN')]) {
|
||||
sh '''
|
||||
/opt/sonar-scanner/bin/sonar-scanner \
|
||||
-Dsonar.projectKey=confdroid_jenkins \
|
||||
-Dsonar.sources=. \
|
||||
-Dsonar.host.url=https://sonarqube.confdroid.com \
|
||||
-Dsonar.token=$SONAR_TOKEN
|
||||
'''
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
stage('create Puppet documentation') {
|
||||
steps {
|
||||
sh '/opt/puppetlabs/bin/puppet strings'
|
||||
}
|
||||
}
|
||||
|
||||
stage('update repo') {
|
||||
steps {
|
||||
sshagent(['edd05eb6-26b5-4c7b-a5cc-ea2ab899f4fa']) {
|
||||
sh '''
|
||||
git config user.name "Jenkins Server"
|
||||
git config user.email jenkins@confdroid.com
|
||||
git rm -r --cached .vscode || echo "No .vscode to remove from git"
|
||||
git add -A && git commit -am "Recommit for updates in build $BUILD_NUMBER" || echo "No changes to commit"
|
||||
git fetch origin
|
||||
git checkout -B master origin/master
|
||||
git merge --no-ff jenkins-build-$BUILD_NUMBER -m "Merge build $BUILD_NUMBER into master"
|
||||
git push origin master
|
||||
'''
|
||||
}
|
||||
}
|
||||
}
|
||||
stage('Mirror to Gitea') {
|
||||
steps {
|
||||
withCredentials([usernamePassword(
|
||||
credentialsId: 'Jenkins-gitea',
|
||||
usernameVariable: 'GITEA_USER',
|
||||
passwordVariable: 'GITEA_TOKEN')]) {
|
||||
script {
|
||||
sh '''
|
||||
git fetch --tags origin
|
||||
git checkout -B gitea-mirror-$BUILD_NUMBER origin/master
|
||||
git rm -f Jenkinsfile
|
||||
git commit -m "Remove Jenkinsfile for Gitea mirror" || echo "No changes to commit"
|
||||
git remote get-url master >/dev/null 2>&1 \
|
||||
&& git remote set-url master https://sourcecode.confdroid.com/confdroid/confdroid_jenkins.git \
|
||||
|| git remote add master https://sourcecode.confdroid.com/confdroid/confdroid_jenkins.git
|
||||
git -c credential.helper="!f() { echo username=${GITEA_USER}; echo password=${GITEA_TOKEN}; }; f" \
|
||||
push --force master HEAD:refs/heads/master
|
||||
git ls-remote --heads master | awk '{print $2}' | sed 's#refs/heads/##' | while read branch; do
|
||||
if [ -n "$branch" ] && [ "$branch" != "master" ]; then
|
||||
git -c credential.helper="!f() { echo username=${GITEA_USER}; echo password=${GITEA_TOKEN}; }; f" \
|
||||
push master --delete "$branch"
|
||||
fi
|
||||
done
|
||||
git -c credential.helper="!f() { echo username=${GITEA_USER}; echo password=${GITEA_TOKEN}; }; f" \
|
||||
push master --tags
|
||||
git ls-remote --tags master | awk '{print $2}' | sed 's#refs/tags/##' | cut -d'^' -f1 | sort -u | while read tag; do
|
||||
if [ -n "$tag" ] && ! git show-ref --tags --verify --quiet "refs/tags/$tag"; then
|
||||
git -c credential.helper="!f() { echo username=${GITEA_USER}; echo password=${GITEA_TOKEN}; }; f" \
|
||||
push master ":refs/tags/$tag"
|
||||
fi
|
||||
done
|
||||
'''
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -107,7 +107,55 @@
|
||||
9
|
||||
10
|
||||
11
|
||||
12</pre>
|
||||
12
|
||||
13
|
||||
14
|
||||
15
|
||||
16
|
||||
17
|
||||
18
|
||||
19
|
||||
20
|
||||
21
|
||||
22
|
||||
23
|
||||
24
|
||||
25
|
||||
26
|
||||
27
|
||||
28
|
||||
29
|
||||
30
|
||||
31
|
||||
32
|
||||
33
|
||||
34
|
||||
35
|
||||
36
|
||||
37
|
||||
38
|
||||
39
|
||||
40
|
||||
41
|
||||
42
|
||||
43
|
||||
44
|
||||
45
|
||||
46
|
||||
47
|
||||
48
|
||||
49
|
||||
50
|
||||
51
|
||||
52
|
||||
53
|
||||
54
|
||||
55
|
||||
56
|
||||
57
|
||||
58
|
||||
59
|
||||
60</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/main/dirs.pp', line 6</span>
|
||||
@@ -117,6 +165,54 @@ class confdroid_jenkins::main::dirs (
|
||||
) inherits confdroid_jenkins::params {
|
||||
if $fqdn == $js_host_fqdn {
|
||||
require confdroid_jenkins::main::install
|
||||
|
||||
# jenkins home
|
||||
file { $js_jenkins_home:
|
||||
ensure => 'directory',
|
||||
owner => 'jenkins',
|
||||
group => 'jenkins',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => var_lib_t,
|
||||
seluser => unconfined_u,
|
||||
}
|
||||
|
||||
# jenkins logs
|
||||
file { $js_jenkins_logs:
|
||||
ensure => 'directory',
|
||||
owner => 'jenkins',
|
||||
group => 'jenkins',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => var_log_t,
|
||||
seluser => unconfined_u,
|
||||
}
|
||||
|
||||
# jenkins cache
|
||||
file { $js_jenkins_cache:
|
||||
ensure => 'directory',
|
||||
owner => 'jenkins',
|
||||
group => 'jenkins',
|
||||
mode => '0750',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => var_t,
|
||||
seluser => unconfined_u,
|
||||
}
|
||||
|
||||
# jenkins run
|
||||
file { $js_jenkins_run:
|
||||
ensure => 'directory',
|
||||
owner => 'jenkins',
|
||||
group => 'jenkins',
|
||||
mode => '0770',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => var_run_t,
|
||||
seluser => unconfined_u,
|
||||
}
|
||||
}
|
||||
}</pre>
|
||||
</td>
|
||||
|
||||
@@ -411,7 +411,13 @@
|
||||
55
|
||||
56
|
||||
57
|
||||
58</pre>
|
||||
58
|
||||
59
|
||||
60
|
||||
61
|
||||
62
|
||||
63
|
||||
64</pre>
|
||||
</td>
|
||||
<td>
|
||||
<pre class="code"><span class="info file"># File 'manifests/params.pp', line 20</span>
|
||||
@@ -452,6 +458,12 @@ class confdroid_jenkins::params (
|
||||
# Service
|
||||
$js_service = 'jenkins'
|
||||
|
||||
# directories
|
||||
$js_jenkins_home = '/var/lib/jenkins'
|
||||
$js_jenkins_logs = "${js_jenkins_home}/logs"
|
||||
$js_jenkins_cache = 'var/cache/jenkins'
|
||||
$js_jenkins_run = '/run/jenkins'
|
||||
|
||||
# includes must be last
|
||||
include confdroid_jenkins::main::config
|
||||
}</pre>
|
||||
|
||||
@@ -8,5 +8,53 @@ class confdroid_jenkins::main::dirs (
|
||||
) inherits confdroid_jenkins::params {
|
||||
if $fqdn == $js_host_fqdn {
|
||||
require confdroid_jenkins::main::install
|
||||
|
||||
# jenkins home
|
||||
file { $js_jenkins_home:
|
||||
ensure => 'directory',
|
||||
owner => 'jenkins',
|
||||
group => 'jenkins',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => var_lib_t,
|
||||
seluser => unconfined_u,
|
||||
}
|
||||
|
||||
# jenkins logs
|
||||
file { $js_jenkins_logs:
|
||||
ensure => 'directory',
|
||||
owner => 'jenkins',
|
||||
group => 'jenkins',
|
||||
mode => '0755',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => var_log_t,
|
||||
seluser => unconfined_u,
|
||||
}
|
||||
|
||||
# jenkins cache
|
||||
file { $js_jenkins_cache:
|
||||
ensure => 'directory',
|
||||
owner => 'jenkins',
|
||||
group => 'jenkins',
|
||||
mode => '0750',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => var_t,
|
||||
seluser => unconfined_u,
|
||||
}
|
||||
|
||||
# jenkins run
|
||||
file { $js_jenkins_run:
|
||||
ensure => 'directory',
|
||||
owner => 'jenkins',
|
||||
group => 'jenkins',
|
||||
mode => '0770',
|
||||
selrange => s0,
|
||||
selrole => object_r,
|
||||
seltype => var_run_t,
|
||||
seluser => unconfined_u,
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
@@ -53,6 +53,12 @@ class confdroid_jenkins::params (
|
||||
# Service
|
||||
$js_service = 'jenkins'
|
||||
|
||||
# directories
|
||||
$js_jenkins_home = '/var/lib/jenkins'
|
||||
$js_jenkins_logs = "${js_jenkins_home}/logs"
|
||||
$js_jenkins_cache = 'var/cache/jenkins'
|
||||
$js_jenkins_run = '/run/jenkins'
|
||||
|
||||
# includes must be last
|
||||
include confdroid_jenkins::main::config
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user