Jenkins Golang 聲明式管道：構建 Docker 鏡像並推送到 Docker Hub

Question

我正在嘗試為我的 Golang 項目創建一個 Docker 映像，並通過 Jenkins 聲明式管道將其上傳到 Docker Hub。

我能夠構建我的項目並運行我的所有測試。

我的Jenkinsfile如下：

#!/usr/bin/env groovy
// The above line is used to trigger correct syntax highlighting.

pipeline {
    agent { docker { image 'golang' } }

    stages {
        stage('Build') {   
            steps {                                           
                // Create our project directory.
                sh 'cd ${GOPATH}/src'
                sh 'mkdir -p ${GOPATH}/src/MY_PROJECT_DIRECTORY'

                // Copy all files in our Jenkins workspace to our project directory.                
                sh 'cp -r ${WORKSPACE}/* ${GOPATH}/src/MY_PROJECT_DIRECTORY'

                // Copy all files in our "vendor" folder to our "src" folder.
                sh 'cp -r ${WORKSPACE}/vendor/* ${GOPATH}/src'

                // Build the app.
                sh 'go build'
            }            
        }

        // Each "sh" line (shell command) is a step,
        // so if anything fails, the pipeline stops.
        stage('Test') {
            steps {                                
                // Remove cached test results.
                sh 'go clean -cache'

                // Run Unit Tests.
                sh 'go test ./... -v'                                  
            }
        }           
    }
}   

我的Dockerfile （如果需要）如下：

# Make a golang container from the "golang alpine" docker image from Docker Hub.
FROM golang:1.11.2-alpine3.8

# Expose our desired port.
EXPOSE 9000

# Create the proper directory.
RUN mkdir -p $GOPATH/src/MY_PROJECT_DIRECTORY

# Copy app to the proper directory for building.
ADD . $GOPATH/src/MY_PROJECT_DIRECTORY

# Set the work directory.
WORKDIR $GOPATH/src/MY_PROJECT_DIRECTORY

# Run CMD commands.
RUN go get -d -v ./...
RUN go install -v ./...

# Provide defaults when running the container.
# These will be executed after the entrypoint.
# For example, if you ran docker run <image>,
# then the commands and parameters specified by CMD would be executed.
CMD ["MY_PROJECT"]

我可以通過以下方式獲取我的 Docker Hub 憑據：

environment {
    // Extract the username and password of our credentials into "DOCKER_CREDENTIALS_USR" and "DOCKER_CREDENTIALS_PSW".
    // (NOTE 1: DOCKER_CREDENTIALS will be set to "your_username:your_password".)
    // The new variables will always be YOUR_VARIABLE_NAME + _USR and _PSW.
    DOCKER_CREDENTIALS = credentials('MY_JENKINS_CREDENTIAL_ID')
}

作為參考，以下是我在 Freestyle 工作中的工作內容：

Execute Shell:

    # Log in to Docker.
    sudo docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD

    # Make a Docker image for our app.
    cd /var/lib/jenkins/tools/org.jenkinsci.plugins.golang.GolangInstallation/Go/src/MY_PROJECT_DIRECTORY/
    sudo docker build -t MY-PROJECT-img .

    # Tag our Docker image.
    sudo docker tag  MY-PROJECT-img   $DOCKER_USERNAME/MY-PROJECT-img

    # Push our Docker image to Docker Hub.
    sudo docker push $DOCKER_USERNAME/MY-PROJECT-img

    # Log out of Docker.
    docker logout

注意：我通過執行以下操作授予 Jenkins sudo 權限：

1. 打開 sudoers 文件進行編輯：

   sudo visudo -f /etc/sudoers

2. 按“i”進入插入模式。

3. 粘貼以下內容：

   jenkins ALL=(ALL) NOPASSWD: ALL

4. 按“ESC”退出插入模式。

5. 要保存，請輸入：

   :w

6. 要退出，請輸入：

   :q

我相信這應該可以通過在我的聲明性管道中添加一個新的stage和agent來實現，但我在網上沒有找到任何東西。

Answer 1

我想到了。

我更新的Jenkinsfile如下：

#!/usr/bin/env groovy
// The above line is used to trigger correct syntax highlighting.

pipeline {
    // Lets Jenkins use Docker for us later.
    agent any    

    // If anything fails, the whole Pipeline stops.
    stages {
        stage('Build & Test') {   
            // Use golang.
            agent { docker { image 'golang' } }

            steps {                                           
                // Create our project directory.
                sh 'cd ${GOPATH}/src'
                sh 'mkdir -p ${GOPATH}/src/MY_PROJECT_DIRECTORY'

                // Copy all files in our Jenkins workspace to our project directory.                
                sh 'cp -r ${WORKSPACE}/* ${GOPATH}/src/MY_PROJECT_DIRECTORY'

                // Copy all files in our "vendor" folder to our "src" folder.
                sh 'cp -r ${WORKSPACE}/vendor/* ${GOPATH}/src'

                // Build the app.
                sh 'go build'               
            }            
        }

        stage('Test') {
            // Use golang.
            agent { docker { image 'golang' } }

            steps {                 
                // Create our project directory.
                sh 'cd ${GOPATH}/src'
                sh 'mkdir -p ${GOPATH}/src/MY_PROJECT_DIRECTORY'

                // Copy all files in our Jenkins workspace to our project directory.                
                sh 'cp -r ${WORKSPACE}/* ${GOPATH}/src/MY_PROJECT_DIRECTORY'

                // Copy all files in our "vendor" folder to our "src" folder.
                sh 'cp -r ${WORKSPACE}/vendor/* ${GOPATH}/src'

                // Remove cached test results.
                sh 'go clean -cache'

                // Run Unit Tests.
                sh 'go test ./... -v -short'            
            }
        }      

        stage('Docker') {         
            environment {
                // Extract the username and password of our credentials into "DOCKER_CREDENTIALS_USR" and "DOCKER_CREDENTIALS_PSW".
                // (NOTE 1: DOCKER_CREDENTIALS will be set to "your_username:your_password".)
                // The new variables will always be YOUR_VARIABLE_NAME + _USR and _PSW.
                // (NOTE 2: You can't print credentials in the pipeline for security reasons.)
                DOCKER_CREDENTIALS = credentials('my-docker-credentials-id')
            }

            steps {                           
                // Use a scripted pipeline.
                script {
                    node {
                        def app

                        stage('Clone repository') {
                            checkout scm
                        }

                        stage('Build image') {                            
                            app = docker.build("${env.DOCKER_CREDENTIALS_USR}/my-project-img")
                        }

                        stage('Push image') {  
                            // Use the Credential ID of the Docker Hub Credentials we added to Jenkins.
                            docker.withRegistry('https://registry.hub.docker.com', 'my-docker-credentials-id') {                                
                                // Push image and tag it with our build number for versioning purposes.
                                app.push("${env.BUILD_NUMBER}")                      

                                // Push the same image and tag it as the latest version (appears at the top of our version list).
                                app.push("latest")
                            }
                        }              
                    }                 
                }
            }
        }
    }

    post {
        always {
            // Clean up our workspace.
            deleteDir()
        }
    }
}