cicd/jenkins-docker-images
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

签入版本

Browse Source
This commit is contained in:
gitadmin
2025-09-16 21:25:24 +08:00
parent 1fd35aa3c7
commit ecc08779a8
34 changed files with 4174 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dockerfiles/jre/8u202-rocky8-dos/Dockerfile
+95
View File
@@ -0,0 +1,95 @@
# 使用Rocky Linux 8作为基础镜像
FROM rockylinux:8
# 设置元数据标签
LABEL maintainer="小蚂蚁云团队" \
version="1.0" \
description="基于Rocky Linux 8的JRE 8u202运行环境（支持中英文）" \
java.version="1.8.0_202"
# 设置环境变量
ENV TZ=Asia/Shanghai \
LANG=zh_CN.UTF-8 \
LANGUAGE=zh_CN:zh:en_US:en \
LC_ALL=zh_CN.UTF-8 \
JAVA_HOME=/usr/local/jre1.8.0_202 \
PATH=/usr/local/jre1.8.0_202/bin:$PATH
# 设置工作目录
WORKDIR /tmp
# 复制本地JRE压缩包到镜像中
COPY jre-8u202-linux-x64.tar.gz /tmp/
# 安装必要的系统包并配置环境
RUN set -eux; \
\
# 更新系统并安装中文语言支持
dnf update -y && \
dnf install -y \
tzdata \
glibc-langpack-zh \
glibc-langpack-en \
fontconfig \
dejavu-sans-fonts \
dejavu-serif-fonts \
dejavu-sans-mono-fonts \
wqy-microhei-fonts \
&& \
\
# 清理dnf缓存以减少镜像大小
dnf clean all && \
rm -rf /var/cache/dnf; \
\
# 配置时区
ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && \
echo $TZ > /etc/timezone; \
\
# 生成中文本地化配置
localedef -c -f UTF-8 -i zh_CN zh_CN.UTF-8 && \
localedef -c -f UTF-8 -i en_US en_US.UTF-8; \
\
# 设置系统语言环境
echo 'LANG="zh_CN.UTF-8"' > /etc/locale.conf; \
\
# 创建Java安装目录
mkdir -p /usr/local/java; \
\
# 解压JRE并设置权限（JRE包解压后通常直接包含jre目录）
tar -xzf jre-8u202-linux-x64.tar.gz -C /usr/local/ && \
\
# 删除临时文件
rm -f jre-8u202-linux-x64.tar.gz; \
\
# 创建符号链接以便版本升级时更容易管理
ln -sf /usr/local/jre1.8.0_202 /usr/bin/jre; \
\
# 创建字体目录
mkdir -p /usr/share/fonts/ && \
chmod 755 /usr/share/fonts/ && \
cp ./fonts/simsun.ttf /usr/share/fonts/ && \
\
# 更新字体缓存
fc-cache -fv; \
\
# 验证JRE安装
java -version; \
\
# 创建非root用户用于运行Java应用
groupadd -r esxi && \
useradd -r -g esxi -d /opt/esxi -s /bin/bash esxi && \
mkdir -p /opt/esxi && \
chown -R esxi:esxi /opt/esxi;
# 切换到应用目录
WORKDIR /opt/apps
# 设置默认用户（推荐在生产环境中启用）
#USER esxi
# 设置健康检查
HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
CMD java -version > /dev/null 2>&1 || exit 1
# 设置默认启动命令
CMD ["java", "-version"]
dockerfiles/jre/8u202-rocky8-dos/README.md
+133
View File
@@ -0,0 +1,133 @@
1、下载jdk/jre
[官网下载地址](https://www.oracle.com/java/technologies/downloads/archive/) ，由于服务器上只需要java运行时环境，所以这里选择下载jre，如下图下载需要的对应的版本：
2、删除jre中无用的文件
```
#解压
tar -zxvf jre-8u202-linux-x64.tar.gz
cd jre1.8.0_202
#删除文本文件
rm -rf COPYRIGHT LICENSE README release THIRDPARTYLICENSEREADME-JAVAFX.txt THIRDPARTYLICENSEREADME.txt Welcome.html
#删除其他无用文件
rm -rf lib/plugin.jar \
lib/ext/jfxrt.jar \
bin/javaws \
lib/javaws.jar \
lib/desktop \
plugin \
lib/deploy* \
lib/*javafx* \
lib/*jfx* \
lib/amd64/libdecora_sse.so \
lib/amd64/libprism_*.so \
lib/amd64/libfxplugins.so \
lib/amd64/libglass.so \
lib/amd64/libgstreamer-lite.so \
lib/amd64/libjavafx*.so \
lib/amd64/libjfx*.so
#将解压文件重新压缩
tar -zcvf jre-8u202.tar.gz jre/
```
3、制作Dockerfile文件
```
# 使用CentOS 8作为基础镜像
FROM centos:8
# 维护者
MAINTAINER author 小蚂蚁
# 创建一个新目录来存储jdk文件
RUN mkdir /usr/local/java
# 将jdk压缩文件复制到镜像中，它将自动解压缩tar文件
ADD jre-8u202.tar.gz /usr/local/java/
# 设置时区
RUN ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
# 设置环境变量
ENV LANG=en_US.UTF-8 LANGUAGE=en_US.UTF-8
ENV JAVA_HOME /usr/local/java/jre1.8.0_202
ENV PATH $JAVA_HOME/bin:$PATH
# VOLUME 指定了临时文件目录为/tmp
# 其效果是在主机 /var/lib/docker 目录下创建了一个临时文件，并链接到容器的/tmp
VOLUME /tmp
# 工作目录
WORKDIR /opt/
```
4、构建镜像
```
docker build -t jre:8u202-centos8 .
```
5、创建容器
```
docker run -it --name docker_jre8 jre:8u202-centos8
```
```
docker run -i -t jre:8u202-centos8 /bin/bash
查看版本：
[root@3a881fab5716 opt]# java -version
java version "1.8.0_202"
Java(TM) SE Runtime Environment (build 1.8.0_202-b08)
Java HotSpot(TM) 64-Bit Server VM (build 25.202-b08, mixed mode)
```
6、上传
```
# 打标签
docker tag jre:8u202-centos8 192.168.10.101:8001/xiaomayi-base/jre:8u202-centos8
# 上传镜像
docker push 192.168.10.101:8001/xiaomayi-base/jre:8u202-centos8
```
特别备注：
目标服务器非 root 用户权限问题解决:
```
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post "http://%2Fvar%2Frun%2Fdocker.sock/v1.24/auth": dial unix /var/run/docker.sock: connect: permission denied
permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Post "http://%2Fvar%2Frun%2Fdocker.sock/v1.24/images/create?fromImage=manage.harbor.djangoadmin.cn%2Fxiaomayi%2Fxiaomayi-elevue&tag=dev-137": dial unix /var/run/docker.sock: connect: permission denied
```
解决办法：把我们当前的用户添加到docker组中就可以了；
参考地址：https://blog.csdn.net/weixin_43321041/article/details/120399194
chmod 666 /var/run/docker.sock
或者
权限问题：
chmod 600 ~/.docker/config.json
chmod 700 ~/.docker
sudo chown $USER:$USER ~/.docker
sudo chown $USER:$USER ~/.docker/config.json
应用部署服务器需要设置docker配置：
```
vim /usr/lib/systemd/system/docker.service
--insecure-registry manage.harbor.xiaomayicloud.com --insecure-registry 192.168.10.202:8001
chmod 666 /var/run/docker.sock
```
dockerfiles/jre/8u202-rocky8-dos/deploy.sh
+209
View File
@@ -0,0 +1,209 @@
#!/bin/bash
set -euo pipefail
# 配置参数
IMAGE_NAME="jre"
VERSION="8u202-rocky8-dos"
HARBOR_REGISTRY="192.168.10.102:8001" # 替换为实际的Harbor地址
HARBOR_PROJECT="xiaomayi-base" # 替换为实际的Harbor项目名
HARBOR_USERNAME="deploy" # 替换为Harbor用户名
HARBOR_PASSWORD="Harbor20240330" # 替换为Harbor密码
# 完整的镜像标签
FULL_IMAGE_NAME="${HARBOR_REGISTRY}/${HARBOR_PROJECT}/${IMAGE_NAME}"
TAG_VERSION="${VERSION}"
TAG_LATEST="latest"
# 颜色输出函数
red() { echo -e "\033[31m$*\033[0m"; }
green() { echo -e "\033[32m$*\033[0m"; }
yellow() { echo -e "\033[33m$*\033[0m"; }
blue() { echo -e "\033[34m$*\033[0m"; }
# 检查必要文件
check_requirements() {
blue "检查构建所需文件..."
if [ ! -f "jre-8u202-linux-x64.tar.gz" ]; then
red "错误: jre-8u202-linux-x64.tar.gz 不存在"
echo "请从Oracle官网下载JRE 8u202并放置在当前目录"
exit 1
fi
if [ ! -d "fonts" ]; then
yellow "提示: fonts 目录不存在，创建空目录"
mkdir -p fonts/
yellow "可以放置中文字体文件到 fonts/ 目录以获得更好的中文支持"
fi
green "✓ 文件检查完成"
}
# 登录Harbor仓库
login_to_harbor() {
blue "登录Harbor仓库: ${HARBOR_REGISTRY}"
if echo "${HARBOR_PASSWORD}" | docker login -u "${HARBOR_USERNAME}" --password-stdin "${HARBOR_REGISTRY}"; then
green "✓ Harbor登录成功"
else
red "✗ Harbor登录失败"
exit 1
fi
}
# 构建Docker镜像
build_image() {
blue "开始构建Docker镜像..."
local build_cmd=(
docker build
# --pull
# --no-cache
-t "${FULL_IMAGE_NAME}:${TAG_VERSION}"
# -t "${FULL_IMAGE_NAME}:${TAG_LATEST}"
.
)
echo "执行命令: ${build_cmd[*]}"
if "${build_cmd[@]}"; then
green "✓ 镜像构建成功"
else
red "✗ 镜像构建失败"
exit 1
fi
}
# 显示镜像信息
show_image_info() {
blue "镜像构建信息:"
echo "----------------------------------------"
docker images "${FULL_IMAGE_NAME}" --format "table {{.Repository}}\t{{.Tag}}\t{{.Size}}"
echo "----------------------------------------"
# 显示详细大小信息
local image_size=$(docker image inspect "${FULL_IMAGE_NAME}:${TAG_VERSION}" --format='{{.Size}}' | awk '{printf "%.2f MB", $1/1024/1024}')
green "镜像大小: ${image_size}"
}
# 测试镜像功能
test_image() {
blue "测试镜像功能..."
echo "1. 测试Java版本:"
if docker run --rm "${FULL_IMAGE_NAME}:${TAG_VERSION}" java -version; then
green "✓ Java测试通过"
else
red "✗ Java测试失败"
exit 1
fi
echo "2. 测试区域设置:"
if docker run --rm "${FULL_IMAGE_NAME}:${TAG_VERSION}" locale; then
green "✓ 区域设置测试通过"
else
red "✗ 区域设置测试失败"
exit 1
fi
echo "3. 测试时区设置:"
if docker run --rm "${FULL_IMAGE_NAME}:${TAG_VERSION}" date; then
green "✓ 时区测试通过"
else
red "✗ 时区测试失败"
exit 1
fi
}
# 推送镜像到Harbor
push_to_harbor() {
blue "推送镜像到Harbor仓库..."
# 推送版本标签
if docker push "${FULL_IMAGE_NAME}:${TAG_VERSION}"; then
green "✓ 版本标签推送成功: ${TAG_VERSION}"
else
red "✗ 版本标签推送失败"
exit 1
fi
# # 推送latest标签
# if docker push "${FULL_IMAGE_NAME}:${TAG_LATEST}"; then
# green "✓ latest标签推送成功"
# else
# red "✗ latest标签推送失败"
# exit 1
# fi
}
# 清理本地镜像
cleanup_local() {
blue "清理本地镜像..."
docker rmi "${FULL_IMAGE_NAME}:${TAG_VERSION}" "${FULL_IMAGE_NAME}:${TAG_LATEST}" 2>/dev/null || true
green "✓ 本地镜像清理完成"
}
# 验证远程镜像
verify_remote_image() {
blue "验证远程镜像..."
# 尝试拉取验证
if docker pull "${FULL_IMAGE_NAME}:${TAG_VERSION}"; then
green "✓ 远程镜像验证成功"
docker rmi "${FULL_IMAGE_NAME}:${TAG_VERSION}" 2>/dev/null || true
else
red "✗ 远程镜像验证失败"
exit 1
fi
}
# 生成使用说明
generate_usage() {
cat << EOF
$(green "=== 镜像构建和推送完成 ===")
$(blue "镜像名称:") ${FULL_IMAGE_NAME}
$(blue "可用标签:") ${TAG_VERSION}, ${TAG_LATEST}
$(yellow "使用方法:")
1. 拉取镜像:
docker pull ${FULL_IMAGE_NAME}:${TAG_VERSION}
2. 运行测试:
docker run --rm ${FULL_IMAGE_NAME}:${TAG_VERSION} java -version
3. 作为基础镜像使用:
FROM ${FULL_IMAGE_NAME}:${TAG_VERSION}
$(green "镜像已成功推送到Harbor仓库!")
EOF
}
# 主函数
main() {
echo "$(blue '=== RockyLinux 8 JRE 8u202 基础镜像构建脚本 ===')"
echo "$(blue "目标仓库: ${HARBOR_REGISTRY}")"
echo "$(blue "镜像名称: ${IMAGE_NAME}")"
echo "$(blue "版本标签: ${VERSION}")"
echo "----------------------------------------"
# 执行步骤
check_requirements
login_to_harbor
build_image
show_image_info
test_image
push_to_harbor
cleanup_local
verify_remote_image
generate_usage
green "✅ 所有步骤完成!"
}
# 异常处理
trap 'red "脚本执行被中断"; exit 1' INT TERM
# 执行主函数
main "$@"