drone CI

drone

1、部署 drone

version: '3'
services:
  drone-server:
    image: drone/drone:latest
    ports:
      - 80:80
    volumes:
      - ./drone:/var/lib/drone:rw
      # 挂载宿主机docker进程
      - /var/run/docker.sock:/var/run/docker.sock
    restart: always
    container_name: drone-server
    environment:
      # 注册    
      - DRONE_OPEN=false 
      - DRONE_SERVER_PROTO=http
      - DRONE_SERVER_HOST=drone.sane.vip
      # 是否开启单机版 单机版不需要下面的 agent
      - DRONE_AGENTS_ENABLED=false
      # 日志
      - DRONE_LOGS_TRACE=true
      - DRONE_LOGS_DEBUG=true
      - DRONE_GOGS=true
      - DRONE_GOGS_SERVER=http://gogs.sane.vip
      # 管理的版本应用
      - DRONE_PROVIDER=gogs
      # 允许登录的人员、组织
      - DRONE_USER_FILTER=sane
      # 加密密钥
      - DRONE_DATABASE_SECRET=9ae2e42d74b4cc
      - DRONE_DATABASE_DRIVER=mysql
      - DRONE_DATABASE_DATASOURCE=root:password@tcp(1.2.3.4:3306)/drone?parseTime=true
      # rpc key
      - DRONE_RPC_SECRET=142533b0ce3b14
      # 指定管理员
      - DRONE_USER_CREATE=username:sane,admin:true

  drone-agent:
    image: drone/agent:latest
    depends_on:
      - drone-server
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    restart: always
    container_name: drone-agent
    environment:
      - DRONE_RPC_SERVER=http://drone-server
      - DRONE_RPC_SECRET=142533b0ce3b14
      - DRONE_LOGS_TRACE=true
      - DRONE_LOGS_DEBUG=true
      # 限制运行程序可以执行的并发管道数
      - DRONE_RUNNER_CAPACITY=2
    dns: 114.114.114.114

# 启动
docker-compose up [-d] [--build]
# 停止
docker-compose stop | docker-stop 容器名/容器id
# 销毁
docker-compose down | docker rm 容器名/容器id

2、部署 CI\CD 项目

Project webhooks 配置 webhook 触发 ProtectedTrusted 配置 Protected 需要手动 approve才可以触发对应部署流程，否则自动触发 配置 Trusted 可以使用主机挂载目录或者开启特权容器 Project visibility 仓库可见性 Timeout 脚本执行部署超时时间 Configuration 指定项目中的脚本文件 Secrets 隐私数据保护 Cron Jobs 定时任务 配置完成后 drone 会自动在对应仓库下新增一个 web 钩子

• 浏览器打开对应 drone-server http://drone.sane.vip 使用 gogs 账号密码登录即可； drone 自动同步对应仓库信息；同步原理见 gogs/docs-api

kind: pipeline
type: docker
name: 测试

steps:
- name: 更新代码以及安装依赖
  image: node:10-alpine
  pull: if-not-exists
  commands:
  - echo "更新代码"
  - echo "成功"

- name: 发布到 preview 服务器
  image: appleboy/drone-scp
  settings:
    host:
      from_secret: preview-host
    username:
      from_secret: preview-user
    key:
      from_secret: preview-ssh
    port:
      from_secret: preview-port
    command_timeout: 5m
    overwrite: 1
    strip_components: 1
    target: 
      - /data/www/vue-admin/
    source:
      - .
  when:
      status: [success]
      event:
      - push
      branch:
      - master
      target:
      - preview

- name: 企业微信通知
  image: clem109/drone-wechat
  settings:
    corpid:
      from_secret: corpid
    corp_secret:
      from_secret: corp_secret
    agent_id:
      from_secret: agent_id
    to_user:
      from_secret: to_user
    title: ${DRONE_REPO_NAME}
    description: "执行编号: ${DRONE_BUILD_NUMBER} 失败. ${DRONE_COMMIT_AUTHOR} 请检查. 执行结果: ${DRONE_BUILD_LINK} "
    msg_url: ${DRONE_BUILD_LINK}
    btn_txt: btn
  when:
      status: 
      - failure
      - success
      branch:
      - master

# - name: grafana 视图
#   image: fdeschenes/drone-grafana-annotation
#   settings:  
#     api_key: eyJrIjoiaWZUWVJOR3FWbXNPSEtLZ29vOWcxWmxyZ1oxbjVaNkwiLCJuIjoiZZCI6MX0=
#     tags:
#       - deploy
#       - production
#     text: "Drone"
#     url: http://grafana.test.com

# ---
# kind: pipeline
# type: exec
# name: 本系统执行

# clone:
#   disable: true

# platform:
#   os: linux
#   arch: amd64

# steps:
# - name: 打印
#   commands:
#     - date
#     - hostname
#     - pwd

# trigger:
#   status: [success]

#在指定的pipeline完成之后进行验证
# depends_on:
#   - build

• 项目中增加 .drone.yml 文件 编辑内容如上， push 将会自动触发

参考文件

1. drone documentation
2. drone plugin