DevOps 持续集成 - Jenkins + Gitlab | 环境部署 | 性能优化 | 报错排查

ゝ一世哀愁。 2022-10-15 01:55 6阅读 0赞

### DevOps 持续集成 - Jenkins + Gitlab ###

*  一、DevOps 概述
 *   *  1.1 持续集成
     *  1.2 持续交付
     *  1.3 持续部署
 *  二、部署 Jenkins
 *   *  2.1 安装 JDK
     *  2.2 安装 Jenkins
     *  2.3 Jenkins 配置优化
     *   *  ① JVM内存优化
         *  ② 插件源优化
     *  2.4 启动 Jenkins
     *   *  ① 解锁 Jenkins
         *  ② 选择插件安装
     *  2.5 安装 Git
     *  2.6 配置 Git
     *  2.7 初始化 Git
 *  三、部署 Gitlab
 *   *  3.1 安装 Gitlab
     *  3.2 Gitlab 初始化
     *  3.3 Gitlab 配置优化
     *   *  ① 修改仓库地址
         *  ② 优化内存占用
 *  四、Jenkins + Gitlab + Nginx 自动化部署
 *   *  4.1 生产环境
     *  4.2 Nginx 部署
     *   *  ① Nginx 配置优化\[可选\]
     *  4.3 Jenkins 插件安装
     *  4.4 Jenkins 密钥认证
     *   *  ① Gitlab新增SSH公钥
         *  ② Jenkins 拉去代码认证
         *  ③ Jenkins 集成 Gitlab
         *  ④ 添加 SSH 服务器
     *  4.4 构建任务
     *  4.5 开始测试
     *   *  ① 通过 WebHooks 构建
         *  ② 通过 Jenkins 构建
 *  五、报错排查
 *   *  ① webhook Hook executed successfully but returned HTTP 422
     *  ② Hook executed successfully but returned HTTP 404
     *  ③ Error 403 No valid crumb was included in the request
     *  ④ Failed to connect to repository : Error performing git command: git ls-remote -h
     *  ⑤ Urlis blocked: Requests to the local network are not allowed

**更新时间**：2021年5月24日

--------------------

# 一、DevOps 概述 #

DevOps（Development和Operations的组合词）是一种重视“软件开发人员（Dev）”和“IT运维技术人员（Ops）”之间沟通合作的文化、运动或惯例。通过自动化“软件交付”和“架构变更”的流程，来使得构建、测试、发布软件能够更加地快捷、频繁和可靠

## 1.1 持续集成 ##

在开发工程中可以频繁的将代码部署并集成到服务器进行自动化测试

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70_pic_center][]

## 1.2 持续交付 ##

在持续集成的环境基础之上，将代码部署到预生产环境

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70_pic_center 1][]

## 1.3 持续部署 ##

在持续交付的基础上，把部署到生产环境的过程自动化

> 持续部署和持续交付的区别在于最终部署到生产环境是自动化的

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70_pic_center 2][]

# 二、部署 Jenkins #

Jenkins是一款基于Java编写的开源 CI&CD 软件，用于自动化各种任务，包括构建、测试和部署软件

## 2.1 安装 JDK ##

yum -y install java-1.8.0-openjdk*

## 2.2 安装 Jenkins ##

**国内下载源：**[清华源][Link 1]

cd /opt
    
    #如果下载较慢可以尝试scp上传
    curl -o /opt/jenkins-2.277.4-1.1.noarch.rpm https://mirrors.tuna.tsinghua.edu.cn/jenkins/redhat-stable/jenkins-2.277.4-1.1.noarch.rpm
    
    #使用版本为最新的LTS稳定版
    rpm -ivh jenkins-2.277.4-1.1.noarch.rpm

![20210523112100995.png][]

## 2.3 Jenkins 配置优化 ##

### ① JVM内存优化 ###

cd /etc/sysconfig
    cp -p jenkins{
        ,.bak}
    
    sed -i "47c JENKINS_JAVA_OPTIONS=\"-server -Xms1024m -Xmx2048m -XX:PermSize=256m -XX:MaxPermSize=512m -Djava.awt.headless=true\"" jenkins.bak
    
    cat jenkins.bak > jenkins

### ② 插件源优化 ###

cd /var/lib/jenkins/updates
    
    cp -p default.json{
        ,.bak}
    
    sed -i 's/http:\/\/updates.jenkins-ci.org\/download/https:\/\/mirrors.tuna.tsinghua.edu.cn\/jenkins/g' default.json && sed -i 's/http:\/\/www.google.com/https:\/\/www.baidu.com/g' default.json.bak
    
    cat default.json.bak > default.json

## 2.4 启动 Jenkins ##

systemctl start jenkins
    
    netstat -natp | grep java

![20210523113937913.png][]

### ① 解锁 Jenkins ###

根据提示的路径查看密钥

cat /var/lib/jenkins/secrets/initialAdminPassword

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70][]

### ② 选择插件安装 ###

如果不知道该如何选择可以点击**安装推荐的插件**  
如出现插件安装失败多重试几次即可  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 1][]

## 2.5 安装 Git ##

yum -y install git

## 2.6 配置 Git ##

#配置git使用用户
    git config --global user.name "fox"
    #配置git使用邮箱
    git config --global user.email "***@qq.com"
    #配置git语法高亮
    git config --global color.ui true
    
    git config --list

![20210523140828522.png][]

## 2.7 初始化 Git ##

mkdir /work
    cd /work
    git init

![20210523141038739.png][]

git status

![20210523141100901.png][]

# 三、部署 Gitlab #

GitLab是一个利用 Ruby on Rails 开发的开源应用程序，实现一个自托管的Git项目仓库，可通过Web界面进行访问公开的或者私人项目

## 3.1 安装 Gitlab ##

官方下载源：[https://packages.gitlab.com/gitlab/gitlab-ce][https_packages.gitlab.com_gitlab_gitlab-ce]

yum install -y policycoreutils-python
    
    #YUM安装[不推荐]
    curl -s https://packages.gitlab.com/install/repositories/gitlab/gitlab-ce/script.rpm.sh | sudo bash
    
    yum install gitlab-ce-13.12.0-ce.0.el7.x86_64
    
    #RPM安装
    rpm -ivh gitlab-ce-13.12.0-ce.0.el7.x86_64.rpm

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 2][]

## 3.2 Gitlab 初始化 ##

gitlab-ctl reconfigure
    gitlab-ctl stop

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 3][]

## 3.3 Gitlab 配置优化 ##

### ① 修改仓库地址 ###

vim /var/opt/gitlab/gitlab-rails/etc/gitlab.yml

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 4][]

### ② 优化内存占用 ###

vim /etc/gitlab/gitlab.rb
    
    #设置站点地址
    external_url 'http://192.168.0.200'
    #进程超时时间
    unicorn['worker_timeout'] = 60
    #减少进程数
    unicorn['worker_processes'] = 10
    #进程内存限制
    unicorn['worker_memory_limit_min'] = "200 * 1 << 20"
    unicorn['worker_memory_limit_max'] = "300 * 1 << 20"
    #减少数据库缓存
    postgresql['shared_buffers'] = "256MB"
    #减少数据库并发量
    postgresql['max_parallel_workers_per_gather'] = 0
    #关闭监控monitor
    prometheus['monitor_kubernetes'] = false
    
    egrep -v "#|^$" /etc/gitlab/gitlab.rb
    
    #启动gitlab
    gitlab-ctl start

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 5][]

# 四、Jenkins + Gitlab + Nginx 自动化部署 #

## 4.1 生产环境 ##

<table> 
 <thead> 
  <tr> 
   <th>主机</th> 
   <th>IP地址</th> 
   <th>软件包</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td>Jenkins</td> 
   <td>192.168.0.100</td> 
   <td>Jenkins Git</td> 
  </tr> 
  <tr> 
   <td>Gitlab</td> 
   <td>192.168.0.200</td> 
   <td>Gitlab</td> 
  </tr> 
  <tr> 
   <td>Web</td> 
   <td>192.168.0.10</td> 
   <td>Nginx Git</td> 
  </tr> 
 </tbody> 
</table>

## 4.2 Nginx 部署 ##

Shell 一键部署脚本

#!/bin/bash
    yum -y install git pcre pcre-devel zlib zlib-devel gcc gcc-c++ make
    
    useradd -M -s /sbin/nologin nginx
    
    wget -P /opt http://nginx.org/download/nginx-1.12.0.tar.gz
    
    cd /opt
    tar zxvf nginx-1.12.0.tar.gz
    
    #配置伪装数据
    cd /opt/nginx-1.12.0/src/core
    cp -p nginx.h{
        ,.bak}
    sed -i '13c #define NGINX_VERSION      "=)"' nginx.h.bak
    sed -i '14c #define NGINX_VER          "*Do you want have a bad time" NGINX_VERSION' nginx.h.bak
    cat nginx.h.bak > nginx.h
    
    cd /opt/nginx-1.12.0
    
    ./configure \
    --prefix=/usr/local/nginx \
    --user=nginx \
    --group=nginx 
    
    make -j && make install
    
    ln -s /usr/local/nginx/sbin/nginx /usr/local/sbin/nginx
    ln -s /usr/local/nginx/conf/nginx.conf /etc/nginx.conf
    
    echo '
    [Unit]
    Description=nginx
    After=network.target
    [Service]
    Type=forking
    PIDFile=/usr/local/nginx/logs/nginx.pid
    ExecStart=/usr/local/nginx/sbin/nginx
    ExecReload=/bin/kill -s HUP $MAINPID
    ExecStop=/bin/kill -s QUIT $MAINPID
    PrivateTmp=true
    [Install]
    WantedBy=multi-user.target' > /lib/systemd/system/nginx.service
    
    
    chmod 754 /lib/systemd/system/nginx.service
    
    systemctl start nginx.service
    systemctl enable nginx.service &> /dev/null
    
    
    systemctl restart nginx
    
    ss -tnlp | grep "nginx" &> /dev/null
    if [ $? -eq 0 ];then
       echo "Nginx部署完毕！"
    fi

### ① Nginx 配置优化\[可选\] ###

cd /usr/local/nginx/conf/
    cp -p nginx.conf{
        ,.bak}
    
    #获取CPU核心数量
    CPU=`cat /proc/cpuinfo | grep -c "physical id"`
    
    #开启性能优化
    sed -i '12a\\    use epoll;' nginx.conf.bak
    #开启伪装
    sed -i '20a\\    server_tokens on;' nginx.conf.bak
    #设置工作线程
    sed -i "3c worker_processes  $CPU;" nginx.conf.bak
    #开启网页压缩
    sed -i -e '35 s/#//g' -e '35a\\    gzip_min_length 1k;' -e '35a\\    gzip_buffers 4 16k;' -e '35a\\    gzip_http_version 1.1;' -e '35a\\    gzip_comp_level 6;' -e '35a\\    gzip_vary on;' -e '35a\\    gzip_types text/plain application/x-javascript text/css image/jpg image/jpeg image/png image/gif application/xml text/javascript application/x-httpd-php application/javascript application/json;' nginx.conf.bak
    #开启防盗链
    sed -i -e '50a\\tlocation ~* \\\.(jpg|gif|swf)$ {' -e '50a\\t    valid_referers none blocked *.benet.com;' -e '50a\\t    if ( $invalid_referer ) {' -e '50a\\t    rewrite ^/ http://www.benet.com/error.png;' -e '50a\\t    }' -e '50a\\t    root   html;' -e '50a\\t    expires 1d;' -e '50a\\t}' nginx.conf.bak
    
    cat nginx.conf.bak > nginx.conf

## 4.3 Jenkins 插件安装 ##

*  Build Authorization Token Root
 *  Publish Over SSH
 *  Gitlab Authentication
 *  Gitlab Hook
 *  Gitlab
 *  Git Paramete

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 6][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 7][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 8][]

## 4.4 Jenkins 密钥认证 ##

将公钥分发到Gitlab服务器

#全部回车
    ssh-keygen -t rsa

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 9][]  
将公钥传给 Web 服务器

ssh-copy-id 192.168.0.10

查看公钥

cat /root/.ssh/id_rsa.pub

### ① Gitlab新增SSH公钥 ###

### ② Jenkins 拉去代码认证 ###

cat /root/.ssh/id_rsa

打开 Jenkins `http://192.168.0.100:8080`

添加凭证  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 14][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 15][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 16][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 17][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 18][]

### ③ Jenkins 集成 Gitlab ###

打开 Gitlab `http://192.168.0.200`  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 19][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 20][]  
密钥一定要保存好  
![20210523135410285.png][]  
打开 Jenkins `http://192.168.0.100:8080`  
添加新的凭证  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 21][]  
修改全局配置  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 22][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 23][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 24][]

### ④ 添加 SSH 服务器 ###

打开 Jenkins `http://192.168.0.100:8080`  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 25][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 26][]  
Jenkins查看Key `cat /root/.ssh/id_rsa`  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 27][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 28][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 29][]

## 4.4 构建任务 ##

打开 Jenkins `http://192.168.0.100:8080`

创建一个新项目  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 30][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 31][]  
打开 Gitlab `http://192.168.0.200`

创建一个新项目  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 32][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 33][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 34][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 35][]  
打开 Jenkins 项目选择**源码管理**，并勾选 **git**  
![/][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 36]  
配置构建触发器  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 37][]

> Target branch Regex 目标分支正则表达式

生成WebHooks安全令牌

> WebHooks是一种微服务API  
> 通过自定义回调函数的方式来改变Web应用的一种行为

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 38][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 39][]

> Source file 源文件地址 ，这里表示仓库中当前分支的所有代码  
> Remove prefix 指定要删除的目录  
> Remote directory 指将当前分支的代码所要部署的目录  
> Exec command 指代码部署后执行的指令，一般为重启服务

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 40][]  
打开 Jenkins 项目 `http://192.168.0.200/root/demo`

选择设置 WebHooks  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 41][]  
将刚才在 Jenkins 的key复制到这里  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 42][]

## 4.5 开始测试 ##

传数据至gitlab

cd /work
    git clone git@192.168.0.200:root/demo.git
    cd demo
    echo "Hello World" > index.html
    git add index.html
    git commit -m "add index.html"
    git push

### ① 通过 WebHooks 构建 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 43][]  
返回 HTTP 200 成功  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 44][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 45][]

### ② 通过 Jenkins 构建 ###

![20210523161556556.png][]  
打开 Jenkins 项目进行构建  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 46][]  
查看 Web 服务器文件  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 47][]

# 五、报错排查 #

## ① webhook Hook executed successfully but returned HTTP 422 ##

> HTTP 422 请求格式正确，但是由于含有语义错误，无法响应

解决方法：检查WebHooks地址是否正确

## ② Hook executed successfully but returned HTTP 404 ##

请求页面没用找到  
解决方法：前往gitlab配置勾选 `Enable authentication for '/project' end-point`  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 48][]

## ③ Error 403 No valid crumb was included in the request ##

关闭跨站请求伪造保护，高版本jenkins取消了这个机制的关闭，这里直接对配置文件进行修改

解决方法：

vim /etc/sysconfig/jenkins
    
    47行 修改为
    JENKINS_JAVA_OPTIONS="-server -Xms1024m -Xmx2048m -XX:PermSize=256m -XX:MaxPermSize=512m -Djava.awt.headless=true -Dhudson.security.csrf.G    lobalCrumbIssuerConfiguration.DISABLE_CSRF_PROTECTION=true
    
    systemctl restart jenkins

## ④ Failed to connect to repository : Error performing git command: git ls-remote -h ##

缺少软件包Git  
解决方法：需要安装Git，并进行初始化，步骤参考章节2.5

## ⑤ Urlis blocked: Requests to the local network are not allowed ##

Gitlab默认禁止内网通信  
解决方法：打开管理员设置 -> 网络  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 49][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70_pic_center]: /images/20221014/a9766b6396674c82b8024c61fd24dfe9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70_pic_center 1]: /images/20221014/464c8f261cb94390904bb19e45016b89.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70_pic_center 2]: /images/20221014/c77e6f06377845b6a06285b957c2901c.png
[Link 1]: https://mirrors.tuna.tsinghua.edu.cn/jenkins/redhat-stable/
[20210523112100995.png]: /images/20221014/9cd4babad18a4e2f9e2d91c64928d7b7.png
[20210523113937913.png]: /images/20221014/91d64831fff34430babea659e2273639.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70]: /images/20221014/454098c8945b4574bf5dc5bf2567eb8d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 1]: /images/20221014/c8c9a89501954c7cb7cae9db4c84dbed.png
[20210523140828522.png]: /images/20221014/53f9a153242a4d8895124a0d8ee4b486.png
[20210523141038739.png]: /images/20221014/07b7f544590a4cd7b4c5d11ecab5b58c.png
[20210523141100901.png]: /images/20221014/d1f8b9d0bc43453eb88e0da64635fbd8.png
[https_packages.gitlab.com_gitlab_gitlab-ce]: https://packages.gitlab.com/gitlab/gitlab-ce
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 2]: /images/20221014/99d7fc7ff24448b5a9fa56ae9dd245df.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 3]: /images/20221014/f9af181d1ca84aa083738483b79f04ca.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 4]: /images/20221014/57c96530ed934e8a9f4c6aef59f158a4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 5]: /images/20221014/e3311e86455d4702b61a117c083dfa9e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 6]: /images/20221014/d145a201c91b41fea4ce3c0fbfe89ed3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 7]: /images/20221014/47cef340132340dc96a2e869932ee3ab.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 8]: /images/20221014/6be7e7c60c8d4d979b852a91b3608749.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 9]: /images/20221014/e0830cc88d6e4f459350a5c13492ccfb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 10]: /images/20221014/fa77314599274ac0abce3ffb4c3ae097.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 11]: /images/20221014/06a9344b1b2f4d83840650219fce23b7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 12]: /images/20221014/c652fd49ab09437d9b6f0442e069b0d1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 13]: /images/20221014/314635750374494a954c5be36a3326cf.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 14]: /images/20221014/9d9049107f6c4470830e9540f72e6029.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 15]: /images/20221014/9b83d4c69e874e4c9ddf34e2a821717f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 16]: /images/20221014/55a218500d4b4a4685725b6fe309d033.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 17]: /images/20221014/7eed56cbb72f4881ae433142442a9d83.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 18]: /images/20221014/5ec49494dd7d4e3ead56d23bc6d1d444.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 19]: /images/20221014/0dbf76f3e749442dad011541c9a32043.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 20]: /images/20221014/a739417d0c0a4ca8a8ad22949ca7ffc9.png
[20210523135410285.png]: /images/20221014/c1ded4d5ec4c43c0bb3201959971f045.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 21]: /images/20221014/3cf3d8953b334b17acc092baecc3a410.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 22]: /images/20221014/35586e2f9e5d40d4aa3e958b3899306c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 23]: /images/20221014/cc017f5ff8b9417b8dcc8a070b7adb77.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 24]: /images/20221014/89c689ee7c2247998c6fa2ba09ffbf64.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 25]: /images/20221014/f9bda1e9e69b486eb9cb37ebae522506.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 26]: /images/20221014/e4d4272671bb4c9eb60fa1569eb40ea5.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 27]: /images/20221014/650ab87b0fdd474aad43078422dcb927.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 28]: /images/20221014/0606f858cca44bff9596444b9a5ea22a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 29]: /images/20221014/e2bb79e92dc543eabc043da174962dac.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 30]: /images/20221014/097ac8e157d54d8db1e6dbfa7b14aee9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 31]: /images/20221014/69773dd3b66d4208bfc83f2bffa9ab1e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 32]: /images/20221014/25291765d5d14d189b8cc6e851b3c78b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 33]: /images/20221014/53df0244f5b64597b96f9e17ad1bc683.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 34]: /images/20221014/7062fc4630df49bda77335eecac877b4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 35]: /images/20221014/bec13691d28a4f22be4db768b86b213d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 36]: /images/20221014/1c057fce82cb4186a80356c48c883ade.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 37]: /images/20221014/95e7e82a64d14d6695acdd7c437a73d1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 38]: /images/20221014/95467b491dde4c1d8f56ee314ffbb366.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 39]: /images/20221014/5943cbaf4c2141398290f17fc97e27e8.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 40]: /images/20221014/d9b9aea73ed041f89810f3aaff888ca3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 41]: /images/20221014/ee37f809ca344f80bca3fcc1877f0963.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 42]: /images/20221014/19715d66631c4a41a1476a47ec210281.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 43]: /images/20221014/a7cd95f9bf134af48e4d8b99468861dc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 44]: /images/20221014/ea6c191969a04cce969a8dc5e6119eeb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 45]: /images/20221014/255ddae6b1b1437ea710378c0c74f40b.png
[20210523161556556.png]: /images/20221014/636a08297e4d48a6bf59bf03aa5b2e00.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 46]: /images/20221014/19ade11137974e03b8aabd48d8c20ee9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 47]: /images/20221014/90f36173cda04671950b966a48749a4a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 48]: /images/20221014/d3c00d2f380a4c9f8780c19037ad5772.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 49]: /images/20221014/7ac76f2acd6c42ea850baafbb9985b6c.png