From 16fcc5dc72ff37fffdf932236e9ce71fe496f72b Mon Sep 17 00:00:00 2001 From: dxin Date: Thu, 27 Nov 2025 15:17:39 +0800 Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E5=AE=98=E7=BD=91=E7=9A=84do?= =?UTF-8?q?ckerfile?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Dockerfile/web/lessie_official_web_Dockerfile | 78 +++++++ SCM/构建镜像/build_image_flymoon_admin.groovy | 6 - .../build_image_flymoon_payment.groovy | 5 - .../build_image_lessie_official_web.groovy | 220 ++++++++++++++++++ 4 files changed, 298 insertions(+), 11 deletions(-) create mode 100644 Dockerfile/web/lessie_official_web_Dockerfile create mode 100644 SCM/构建镜像/build_image_lessie_official_web.groovy diff --git a/Dockerfile/web/lessie_official_web_Dockerfile b/Dockerfile/web/lessie_official_web_Dockerfile new file mode 100644 index 0000000..7da4a15 --- /dev/null +++ b/Dockerfile/web/lessie_official_web_Dockerfile @@ -0,0 +1,78 @@ +FROM node:20-bullseye AS builder + +WORKDIR /app + +# 安装编译工具和 SQLite +RUN apt-get update && \ + apt-get install -y --no-install-recommends \ + python3 \ + make \ + g++ \ + gcc \ + sqlite3 \ + libsqlite3-dev && \ + apt-get clean && \ + rm -rf /var/lib/apt/lists/* + +# 环境变量设置 +ENV NUXT_TELEMETRY_DISABLED=1 + +# 复制所有源代码 +COPY ./projects/lessie ./ + +# 删除可能从主机复制过来的 node_modules +RUN rm -rf node_modules +RUN rm -rf .pnpm-store +RUN rm -rf package-lock.json + +# 安装 pnpm v9 (v10 有严格的构建脚本安全限制) +RUN npm install -g pnpm@9 + +# 重新安装所有依赖（在容器内从零开始编译） +RUN pnpm install --no-frozen-lockfile + +# 再次尝试 rebuild better-sqlite3 以确保编译成功 +RUN pnpm rebuild better-sqlite3 + +# 设置生产环境变量 +ENV NODE_ENV=production +ENV HOST=0.0.0.0 +ENV PORT=3000 + +# 构建 Nuxt 应用 +RUN pnpm run build + +RUN ls -a + + + +FROM node:20-slim AS runtime + + +# 安装 nginx +RUN apt-get update && \ + apt-get install -y --no-install-recommends nginx && \ + apt-get clean && \ + rm -rf /var/lib/apt/lists/* + +# 拷贝你的 nginx 配置 +COPY nginx.conf /etc/nginx/nginx.conf + +COPY --from=builder /app/.output /app + +EXPOSE 80 + +WORKDIR /app + +# 创建启动脚本，nginx 在后台启动，node 在前台运行 +RUN echo '#!/bin/sh' > /start.sh && \ + echo 'echo "启动 Nginx..."' >> /start.sh && \ + echo 'nginx' >> /start.sh && \ + echo 'echo "Nginx 已启动"' >> /start.sh && \ + echo 'echo "启动 Node.js 应用..."' >> /start.sh && \ + echo 'exec node /app/server/index.mjs' >> /start.sh && \ + chmod +x /start.sh + +# 启动脚本：nginx 后台运行，node 前台运行 +CMD ["/start.sh"] + diff --git a/SCM/构建镜像/build_image_flymoon_admin.groovy b/SCM/构建镜像/build_image_flymoon_admin.groovy index 62da23a..d0e0208 100644 --- a/SCM/构建镜像/build_image_flymoon_admin.groovy +++ b/SCM/构建镜像/build_image_flymoon_admin.groovy @@ -112,12 +112,6 @@ pipeline { } } - stage('Maven 编译') { - steps { - sh "cd ${WORKSPACE}/ && mvn clean install -Dmaven.test.skip=true" - } - } - stage('登录容器仓库') { steps { withCredentials([usernamePassword( diff --git a/SCM/构建镜像/build_image_flymoon_payment.groovy b/SCM/构建镜像/build_image_flymoon_payment.groovy index 369e0e1..5d8ffc7 100644 --- a/SCM/构建镜像/build_image_flymoon_payment.groovy +++ b/SCM/构建镜像/build_image_flymoon_payment.groovy @@ -110,11 +110,6 @@ pipeline { } } } - stage('Maven 编译') { - steps { - sh "cd ${WORKSPACE}/ && mvn clean install -Dmaven.test.skip=true" - } - } stage('登录容器仓库') { steps { withCredentials([usernamePassword( diff --git a/SCM/构建镜像/build_image_lessie_official_web.groovy b/SCM/构建镜像/build_image_lessie_official_web.groovy new file mode 100644 index 0000000..568bf14 --- /dev/null +++ b/SCM/构建镜像/build_image_lessie_official_web.groovy @@ -0,0 +1,220 @@ +pipeline { + agent any + + parameters { + gitParameter( + branchFilter: 'origin/(.*)', + defaultValue: 'dxin', + name: 'Code_branch', + type: 'PT_BRANCH_TAG', + selectedValue: 'DEFAULT', + sortMode: 'NONE', + description: '选择代码分支: ', + quickFilterEnabled: true, + tagFilter: '*', + listSize: "1" + ) + choice( + name: 'NAME_SPACES', + choices: ['sit', 'test', 'prod'], + description: '选择存放镜像的仓库命名空间：' + ) + string( + name: 'CUSTOM_TAG', + defaultValue: '', + description: '可选：自定义镜像 Tag (字母、数字、点、下划线、短横线), 如 v0.0.1, 留空则自动生成 “ v+构建次数_分支名_短哈希_构建时间 ”' + ) + } + environment { + REGISTRY = "uswccr.ccs.tencentyun.com" // 镜像仓库地址 + NAMESPACE = "lessie${params.NAME_SPACES}" // 命名空间根据choices的选择拼接 + IMAGE_NAME = "lessie-ai-web" // 镜像名（固定前缀） + CREDENTIALS_ID = "dxin_img_hub_auth" // 容器仓库凭证ID + } + + stages { + stage('拉取代码') { + steps { + git branch: "${params.Code_branch}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/web/scalelink-frontend.git' + } + } + + stage('获取信息') { + steps { + script { + // 获取最近一次提交的哈希值（短格式，前8位） + env.GIT_COMMIT_SHORT = sh(script: 'git rev-parse --short HEAD',returnStdout: true).trim() + // 获取最近一次提交的作者 + env.GIT_AUTHOR = sh(script: 'git log -1 --pretty=format:%an',returnStdout: true).trim() + // 获取最近一次提交的时间（格式化） + env.GIT_COMMIT_TIME = sh( + script: 'git log -1 --pretty=format:%ct | xargs -I {} date -d @{} +%Y%m%d-%H%M%S', + returnStdout: true + ).trim() + // 获取最近一次提交的备注信息（转义特殊字符，避免构建失败） + env.GIT_COMMIT_MSG = sh(script: 'git log -1 --pretty=format:%s | sed -e \'s/"/\\"/g\'', returnStdout: true).trim() + + // Jenkins构建次数 + def buildNumber = env.BUILD_NUMBER // Jenkins内置变量，直接获取当前Job的构建序号 + // 当前分支名（处理/为-，如feature/docker_1015 → feature-docker_1015） + def branchName = sh(script: 'git rev-parse --abbrev-ref HEAD', returnStdout: true).trim() + def formattedBranch = branchName.replace('/', '-').replace('_', '-') // 替换分支名中的/和_为- + // 构建时间（格式：202510181215，年-月-日-时-分，无分隔符） + def buildTime = sh(script: 'date +%Y%m%d%H%M', returnStdout: true).trim() + def defaultTag = "v${buildNumber}_${formattedBranch}_${GIT_COMMIT_SHORT}_${buildTime}" + + def customTag = params.CUSTOM_TAG?.trim() + def tagPattern = ~/^[a-zA-Z0-9._-]+$/ + + // 判断最终Tag + if (customTag && customTag ==~ tagPattern) { + echo "✅ 使用自定义镜像 Tag: ${customTag}" + env.IMAGE_TAG = customTag + } else if (customTag) { + echo "⚠️ 自定义 Tag '${customTag}' 不符合规范，将使用默认生成的 Tag: ${defaultTag}" + + def confirmed = true + timeout(time: 1, unit: 'MINUTES') { + try { + input( + message: """⚠️ Tag 命名不规范： + ${customTag} + + 将使用自动生成的 Tag： + ${defaultTag} + + 是否继续构建？""", + ok: '确认' + ) + } catch (err) { + // 用户点击“取消”或中断 + echo "🚫 用户取消构建" + confirmed = false + } + } + + if (confirmed) { + echo "✅ 用户确认使用自动生成的 Tag：${defaultTag}" + env.IMAGE_TAG = defaultTag + } else { + error("流水线已终止。") + } + } else { + env.IMAGE_TAG = defaultTag + echo "未输入自定义 Tag, 使用自动生成规则: ${env.IMAGE_TAG}" + } + } + } + } + + stage('登录容器仓库') { + steps { + withCredentials([usernamePassword( + credentialsId: env.CREDENTIALS_ID, + usernameVariable: 'REGISTRY_USER', + passwordVariable: 'REGISTRY_PWD' + )]) { + sh ''' + echo "$REGISTRY_PWD" | docker login ${REGISTRY} -u ${REGISTRY_USER} --password-stdin + ''' + } + } + } + + stage('构建容器镜像') { + steps { + script { + // 构建镜像，添加标签信息 + sh """ + docker build -t ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG} \ + --label "git-branch='${params.Code_branch}'" \ + --label "git-commit='${GIT_COMMIT_SHORT}'" \ + --label "git-author='${GIT_AUTHOR}'" \ + --label "git-message='${GIT_COMMIT_MSG}'" \ + --label "build-time='${GIT_COMMIT_TIME}'" \ + . + """ + } + } + } + + stage('推送镜像到仓库') { + steps { + script { + sh "docker push ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}" + echo "推送镜像成功：${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}" + } + } + } + } + + post { + always { + script { + def keepCount = 2 + echo "开始清理本地旧镜像，仅保留最近 ${keepCount} 个构建版本" + def imagePrefix = "${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}" + + // 获取所有镜像（按创建时间排序，越新的越前） + // 格式：Repository:Tag ImageID CreatedAt + def allImagesRaw = sh(script: "docker images ${imagePrefix} --format '{{.Repository}}:{{.Tag}} {{.ID}} {{.CreatedAt}}' | sort -rk3", returnStdout: true).trim() + if (!allImagesRaw) { + echo "未找到任何镜像，无需清理" + return + } + + def allImages = allImagesRaw.split('\n') + if (allImages.size() <= keepCount) { + echo "当前镜像数未超过 ${keepCount} 个，无需清理" + return + } + + def oldImages = allImages.drop(keepCount) + echo "发现 ${oldImages.size()} 个旧镜像需要清理" + oldImages.each { line -> + echo " ${line}" + } + + oldImages.each { line -> + def parts = line.split(' ') + def imageTag = parts[0] + def imageId = parts.size() > 1 ? parts[1] : "" + + // 对于标签为的无效镜像，使用镜像ID删除 + if (imageTag.contains("") && imageId) { + echo "删除无效镜像: ${imageId}" + sh(returnStatus: true, script: "docker rmi -f ${imageId} || true") + } else if (imageId) { + // 对于有标签的有效镜像，优先使用镜像ID删除 + echo "删除旧镜像: ${imageTag} (${imageId})" + sh(returnStatus: true, script: "docker rmi -f ${imageId} || true") + } else { + // 兜底方案，使用标签删除 + echo "删除旧镜像: ${imageTag}" + sh(returnStatus: true, script: "docker rmi -f ${imageTag} || true") + } + } + + echo "清理完成，当前镜像状态：" + sh """ + docker images ${imagePrefix} --format 'table {{.Repository}}\\t{{.Tag}}\\t{{.CreatedAt}}\\t{{.Size}}' + """ + + sh "docker logout ${REGISTRY}" + echo "容器仓库已登出，本地凭证已清理" + } + } + success { + // 输出构建结果 + echo "镜像构建成功！" + echo "镜像地址：${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}" + echo "对应代码提交：${GIT_COMMIT_SHORT}（${GIT_COMMIT_MSG}）" + } + failure { + // 输出构建结果 + echo "部署有错误，请检查！" + } + } +} \ No newline at end of file