用轻量级开源工具 Drone 完成小团队的 CI/CD

---

- name: Remove Docker system
  yum:
    name:
    - docker-client
    - docker-client-latest
    - docker-common
    - docker-latest
    - docker-latest-logrotate
    - docker-logrotate
    - docker-selinux
    - docker-engine-selinux
    - docker-engine
    state: absent
  tags:
  - cicd
  - docker_remove

- name: Remove Docker files
  shell: |
    rm -rf /etc/systemd/system/docker.service.d
    rm -rf /var/lib/docker
    rm -rf /var/run/docke
    rm -rf /etc/docker  tags:
  - cicd
  - docker_remove

- name: Install Docker yum
  yum:
    name:
    - yum-utils
    - device-mapper-persistent-data
    - lvm2
    state: present
  tags:
  - cicd
  - docker_install

- name: Install yum manager
  shell: |
        yum-config-manager --add-repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo  tags:
  - cicd
  - docker_install

- name: Install Docker
  yum:
    name: docker-ce
    state: present
  tags:
  - cicd
  - docker_install

- name: Configure Docker for files
  file:
    path: "{{ item }}"
    state: directory
  with_items:
  - /etc/docker
  - /etc/systemd/system/docker.service.d
  tags:
  - cicd
  - docker_install

- name: Configure Docker for config
  template:
    src: "{{ item.name }}"
    dest: "{{ item.dest }}"
  loop:
  - { name: "daemon.json.j2", dest: "/etc/docker/daemon.json" }
  - { name: "docker.service.j2", dest: "/usr/lib/systemd/system/docker.service" }
  tags:
  - cicd
  - docker_install

- name: Started Docker
  systemd:
    name: docker
    enabled: yes
    state: started
  tags:
  - cicd
  - docker_install

- name: Install Docker-Compose
  environment:
    DOCKER_COMPOSE_VERSION: 1.25.0-rc2
  shell: |
    curl -L https://get.daocloud.io/docker/compose/releases/download/$DOCKER_COMPOSE_VERSION/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
    chmod +x /usr/local/bin/docker-compose  tags:
  - cicd
  - docker_install

- name: Install Docker Swarm
  shell:
    docker swarm init --advertise-addr {{ groups['pankuibo'][0] }}
  tags:
  - cicd
  - docker_install

ansible-playbook --inventory-file='./../inventory/inventory.ini' ./deploy.yml -e target='test' --tags='docker_remove,docker_install,docker_compose' --forks=5 --user='root'

version: "3.8"

services:
  gitea:
    image: gitea/gitea:1.16.5
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - DB_TYPE=mysql
      - DB_HOST=localhost:3306
      - DB_NAME=gitea
      - DB_USER=gitea
      - SSH_PORT=2224
    volumes:
      - /data/gitea:/data
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3000:3000"
      - "2224:2224"
    networks:
      - "default"
    deploy:
      mode: replicated
      replicas: 1
      labels:
        - "traefik.enable=true"
        - "traefik.docker.network=default"
        - "traefik.http.services.gitea_gitea.loadbalancer.server.port=3000"
        # http 80
        - "traefik.http.routers.gitea.rule=Host(`gitea.localhost.com`)"
        - "traefik.http.routers.gitea.entrypoints=web"
      placement:
        constraints: [node.role == manager]
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 3
        window: 120s
networks:
  default:
    external:
      name: traefik_default

version: "3.8"

services:
  mysql:
    image: mysql:5.7.37
    environment:
      - MYSQL_ROOT_PASSWORD=PWD
    command: --default-authentication-plugin=mysql_native_password
    volumes:
      - /data/mysql:/var/lib/mysql
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3306:3306"
    networks:
      - "default"
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.role == manager]
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 3
        window: 120s
networks:
  default:
    external:
      name: traefik_default

1、docker stack deploy -c docker-compose-mysql.yaml mysql
2、docker stack deploy -c docker-compose-gitea.yaml gitea

version: "3.8"

services:
  gitea:
    image: gitea/gitea:1.16.5
    environment:
+      - DB_TYPE=mysql
+      - DB_HOST=localhost:3306
+      - DB_NAME=gitea
+      - DB_USER=gitea

openssl rand -hex 16
61379d57490fe37822267e7984acc934

docker pull drone/drone

DRONE_DATABASE_DATASOURCE=root:password@tcp(1.2.3.4:3306)/drone?parseTime=true

$ openssl rand -hex 16
  55f24eb3d61ef6ac5e83d550178638dc
  DRONE_USER_CREATE=username:octocat,machine:false,admin:true,token:55f24eb3d61ef6ac5e83d550178638dc

1、Docker Runner
2、kubernetes Runner
3、Exec Runner
4、SSH Runner
5、Digital Ocean Runner
6、Macstadium Runner

version: "3.8"

services:
  drone:
    image: drone/drone:2.0.0 #不要用latest,latest并非稳定版本
    ports:
      - "7000:80"
    networks:
      - "drone"
    volumes:
      - /data/drone/:/var/lib/drone/:rw
      - /var/run/docker.sock:/var/run/docker.sock:rw
    environment:
      #- "DB_PASSWD_FILE=/run/secrets/db_passwd"
      - DRONE_DEBUG=true
      - DRONE_DATABASE_DATASOURCE=drone:123456@tcp(localhost:3306)/drone?parseTime=true #mysql配置，要与上边mysql容器中的配置一致
      - DRONE_DATABASE_DRIVER=mysql
      - DRONE_GITEA_SKIP_VERIFY=false
      - DRONE_GITEA_CLIENT_ID=xxxxxx
      - DRONE_GITEA_CLIENT_SECRET=xxxxxx
      - DRONE_GITEA_SERVER=http://localhost:3000/
      - DRONE_TLS_AUTOCERT=false
      - DRONE_RUNNER_CAPACITY=2
      - DRONE_RPC_SECRET=48f11fe546a25099cde4a05ce35a4815 #RPC秘钥
      - DRONE_SERVER_PROTO=http #这个配置决定了你激活时仓库中的webhook地址的proto
      - DRONE_SERVER_HOST=localhost:7000
      - DRONE_USER_CREATE=username:root,admin:true #管理员账号，是你想要作为管理员的Gitea用户名
      - DRONE_USER_FILTER=root
      - DRONE_DATADOG_ENABLE=false
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.role == manager]
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 3
        window: 120s
  drone-runner:
    image: drone/drone-runner-docker:1.6.3
    networks:
      - "drone"
    depends_on:
      - drone
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:rw
    environment:
      - DRONE_RPC_HOST=localhost:7000
      - DRONE_RPC_SECRET=48f11fe546a25099cde4a05ce35a4815
      - DRONE_RPC_PROTO=http
      - DRONE_RUNNER_CAPACITY=4
      - DRONE_RUNNER_NAME=runner
      - DRONE_RUNNER_LABELS=machine1:runner1
      - DRONE_DEBUG=true
      - DRONE_LOGS_DEBUG=true
      - DRONE_LOGS_PRETTY=true
      - DRONE_LOGS_NOCOLOR=false
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.role == manager]
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 3
        window: 120s
networks:
  drone:
    external: true
    name: traefik_default

docker stack deploy -c docker-compose-drone.yaml drone

kind: pipeline # Pipeline 的类型，其他的还有 secret and signature。
type: docker # 定义了执行任务的类型，这里会使用 Docker 执行。
name: web # 定义 Pipline 的名字，一个 .drone.yml 可以有多个不同名字的 Pipeline。

steps:
- name: build-imaeg # 步骤名
  image: docker # 步骤需要用到的镜像

kind: pipeline
type: docker #在docker runner中运行
name: web

#定义setups，每个setup有属于自己的name，最后会显示在Drone CI管理页面的侧边栏
steps:
- name: restore-cache # 把之前缓存好的数据取出
  image: drillster/drone-volume-cache
  settings:
    restore: true
    mount: # 缓存挂载的文件夹
      - ./.npm-cache
      - ./node_modules
  volumes:
    - name: cache
      path: /cache

- name: compile #编译
  image: node:12
  commands:
  - yarn config set registry https://registry.npm.taobao.org -g
  - yarn config set cache ./.npm-cache --global
  - yarn install
  - yarn run build

- name: build image #打成docker镜像
  image: docker
  failure: ignore
  volumes:
  - name: sock
    path: /var/run/docker.sock
  commands:
  - docker build -t localhost:v1.0 -f Dockerfile .
  - docker image prune -f --filter "dangling=true"   # 清理无用镜像

- name: rebuild-cache # 把依赖和 npm 缓存放到缓存里
  image: drillster/drone-volume-cache
  settings:
    rebuild: true
    mount:
      - ./.npm-cache
      - ./node_modules
  volumes:
    - name: cache
      path: /cache

- name: deploy #部署到服务器上
  image: docker
  failure: ignore
  volumes:
  - name: sock
    path: /var/run/docker.sock
  commands:
  - docker service ls|grep test || export SERVICE=down #先检查服务是否存在,存在更新，不存在创建
  - |
    if [ "$SERVICE" != "down" ]
    then
      docker service update --image test:v1.0 test_test
    else
      docker stack deploy -c deploy.yaml autocd-web
    fi  # 循环检测服务是否启动成功
  - |
    while true
    do
      docker service ps test_test|awk '{print $6}'|awk 'NR==2'|grep 'Running' || export SERVICE=down
      if [ "$SERVICE" == "down" ]
      then
          echo -e "\033[5;35;40m 正在启动中请稍后 ... \033[0m"
          export SERVICE=up
          continue
      else
          docker service logs -n 200 test_test
          sleep 3
          break
      fi
    done
# 挂载宿主机文件到docker容器中
volumes:
- name: sock
  host:
    path: /var/run/docker.sock
- name: cache
  host:
    path: /tmp/cache

# 创建触发器，绑定分支及事件及上一次成功时才运行
trigger:
  branch:
    - master
  event:
    - pull_request
    - push
  status:
    - success
    - failure

node:
  machine1:runner1

# 设置基础镜像,如果本地没有该镜像，会从Docker.io服务器pull镜像
# 这里会直接调用宿主机的密钥登录私有仓库。
FROM nginx:1.19.2-alpine

# 编译项目，使用npm安装程序的所有依赖,利用taobao的npm安装，并打包编译成静态文件
# 这两步在drone里已经完成
# 复制所有静态文件到 /usr/share/nginx/html下。
# 拷贝配置文件到nginx配置目录中
COPY dist/ /usr/share/nginx/html/
ADD nginx.conf /etc/nginx/nginx.conf
ADD default.conf /etc/nginx/conf.d/default.conf


# 暴露container的端口
EXPOSE 80

# 运行命令
CMD ["nginx", "-g", "daemon off;"]

kind: pipeline
type: docker
name: default

steps:
- name: build
  image: golang
  commands:
  - go build
  - go test

node:
  nodeA: runnerA

node:
  nodeA: runnerA
  nodeB: runnerB