1111

## Docker私有镜像仓库Harbor
Harbor介绍
Harbor 是为企业用户设计的开源镜像仓库项目，包括了权限管理(RBAC)、LDAP、审计、安全漏洞扫描、镜像验真、管理界面、自我注册、HA等企业必需的功能，同时针对中国用户的特点，设计镜像复制和中文支持等功能。

官网：https://goharbor.io/

Harbor安装部署
可以准备台新的虚拟机：docker02 10.0.0.200 2核4G

```
# 1.harbor安装的环境要求
安装Harbor必须有docker环境和docker-compose环境
yum install -y docker-ce
yum install -y docker-compose

# 2.解压harbor安装包
[root@docker02 ~]# tar xf harbor-offline-installer-v1.9.0-rc1.tgz
[root@docker02 ~/harbor]# ll
total 605144
-rw-r--r-- 1 root root 619632806 Sep  4  2019 harbor.v1.9.0.tar.gz
-rw-r--r-- 1 root root      5805 Sep  4  2019 harbor.yml
-rwxr-xr-x 1 root root      5088 Sep  4  2019 install.sh
-rw-r--r-- 1 root root     11347 Sep  4  2019 LICENSE
-rwxr-xr-x 1 root root      1748 Sep  4  2019 prepare

# harbor.yml //docker-compose的编排文件，有点像tower的Playbook

# 3.修改harbor配置
[root@docker02 ~/harbor]# vim harbor.yml
hostname: 10.0.0.200
harbor_admin_password: Harbor12345

# 4.执行安装脚本
[root@docker02 ~/harbor]# sh install.sh
[Step 1]: loading Harbor images ...
Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?

# 5.没启Docker，启下docker
[root@docker02 ~/harbor]# systemctl start docker
[root@docker02 ~/harbor]# sh install.sh
[Step 0]: checking installation environment ...
Note: docker version: 24.0.7
Note: docker-compose version: 1.18.0
[Step 1]: loading Harbor images ...
...
...
[Step 2]: preparing environment ...
...
...
Creating redis ... done
Creating harbor-core ... done
Creating network "harbor_harbor" with the default driver
Creating nginx ... done
Creating harbor-db ...
Creating registryctl ...
Creating harbor-portal ...
Creating redis ...
Creating registry ...
Creating harbor-core ...
Creating nginx ...
Creating harbor-jobservice ...
✔ ----Harbor has been installed and started successfully.----
Now you should be able to visit the admin portal at http://10.0.0.200.
For more details, please visit https://github.com/goharbor/harbor .

# 6.浏览器访问http://10.0.0.200
用户名admin
密码Harbor12345
```

![image.png](/static/img/70a55535ad5100d670e47e535bcf3cc5.image.webp)

```
[root@docker02 ~]# docker images //看下，拉了一堆镜像，都是harbor要用的
REPOSITORY                     TAG                       IMAGE ID       CREATED       SIZE
goharbor/chartmuseum-photon     v0.9.0-v1.9.0             47c00be3913e   4 years ago   130MB
goharbor/harbor-migrator       v1.9.0                     9826462ead7c   4 years ago   363MB
goharbor/redis-photon           v1.9.0                     9796fe9032f1   4 years ago   108MB
...

[root@docker02 ~]# docker ps //也起了一堆容器，而且你重启docker后可以开容自启
...

[root@docker02 ~]# cd harbor //也多出来一些东西
[root@docker02 ~/harbor]# ll
total 605152
drwxr-xr-x 3 root root        20 Jan  3 14:15 common
-rw-r--r-- 1 root root      5285 Jan  3 14:15 docker-compose.yml #//这个就是harbor的docker-compose文件
-rw-r--r-- 1 root root 619632806 Sep  4  2019 harbor.v1.9.0.tar.gz
-rw-r--r-- 1 root root      5799 Jan  3 14:12 harbor.yml
-rwxr-xr-x 1 root root      5088 Sep  4  2019 install.sh
-rw-r--r-- 1 root root     11347 Sep  4  2019 LICENSE
-rwxr-xr-x 1 root root      1748 Sep  4  2019 prepare

# 重启机器后开启harbor的命令
[root@docker02 ~/harbor]# docker-compose up -d   //在启动脚本里可以看到
```
## 在harbor中上传镜像

例：将上节docker01机器构建的镜像上传至harbor

```

# 1.修改镜像名称
# 查看镜像
[root@docker01 ~]# docker images
REPOSITORY                     TAG       IMAGE ID       CREATED         SIZE
nginx                          c7_v3     b61e011c7a89   28 hours ago   289MB
# 给镜像改名（会生成一个新的镜像，与原镜像同一个ID，是一样的。原来的可以删掉）
[root@docker01 ~]# docker tag nginx:c7_v3 10.0.0.200/h5_games/nginx:c7_v3
[root@docker01 ~]# docker images
REPOSITORY                     TAG       IMAGE ID       CREATED         SIZE
10.0.0.200/h5_games/nginx       c7_v3     88b3d5a6d73f   2 hours ago     289MB
nginx                           c7_v3     88b3d5a6d73f   2 hours ago     289MB

###命名规则###
照着上面截图命名即可：
harbor服务器地址/项目名称/镜像名称:标签
10.0.0.200/h5_games/nginx:c7_v3

# 2.修改docker配置文件，信任harbor仓库地址
[root@docker01 /etc/docker]# vim daemon.json
{
 "bip": "192.168.10.1/24",
 "registry-mirrors": ["https://pgz00k39.mirror.aliyuncs.com"],
 "insecure-registries": ["http://10.0.0.200"]
}
[root@docker01 ~]# systemctl restart docker


# 3.登录harbor
[root@docker01 ~]# docker login 10.0.0.200
Username: admin
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded


# 4.推送镜像
[root@docker01 ~]# docker push 10.0.0.200/h5_games/nginx:c7_v3
The push refers to repository [10.0.0.200/h5_games/nginx]
cc5163efebe5: Pushed
dff3e2c393d5: Pushed
174f56854903: Pushed
c7_v3: digest: sha256:c1dd2312005598b49a1c2071ad86f45cd084eb46ffe3b2cc378417957f07fd1a size: 953

ps：每一层都有ID，其中有一个就是centos:7的层
```

## 拉取镜像到harbor本机

```

# 直接拉报错
[root@docker02 ~]# docker pull 10.0.0.200/app/web:v1
Error response from daemon: Get "https://10.0.0.200/v2/": dial tcp 10.0.0.200:443: connect: connection refused

[root@docker02 ~]# cd /etc/docker
[root@docker02 /etc/docker]# ll
total 0
[root@docker02 /etc/docker]# vim daemon.json
{
 "bip": "192.168.10.1/24",
 "registry-mirrors": ["https://pgz00k39.mirror.aliyuncs.com"],
 "insecure-registries": ["http://10.0.0.200"]
}
[root@docker02 /etc/docker]# systemctl restart docker
[root@docker02 ~/harbor]# docker-compose up -d

# 要登录下才行
[root@docker02 ~/harbor]# docker login 10.0.0.200
Username: admin
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

[root@docker02 ~/harbor]# docker pull 10.0.0.200/app/web:v1
```

Docker私有镜像仓库Harbor

# 常用插件整理
## 插件安装

```
https://www.tampermonkey.net/index.php?ext=dhdg&version=5.3.2
```
## 网盘智能识别助手

智能识别选中文字中的🔗网盘链接和🔑提取码，识别成功打开网盘链接并自动填写提取码，省去手动复制提取码在输入的烦恼。支持识别 ✅百度网盘 ✅阿里云盘 ✅腾讯微云 ✅蓝奏云 ✅天翼云盘 ✅移动云盘 ✅迅雷云盘 ✅123云盘 ✅360云盘 ✅115网盘 ✅奶牛快传 ✅城通网盘 ✅夸克网盘 ✅FlowUs息流 ✅Chrome 扩展商店 ✅Edge 扩展商店 ✅Firefox 扩展商店 ✅Windows 应用商店。
```
https://greasyfork.org/zh-CN/scripts/422960-%E7%BD%91%E7%9B%98%E6%99%BA%E8%83%BD%E8%AF%86%E5%88%AB%E5%8A%A9%E6%89%8B
```
## 网页加速器
【网页加速器】是一个及其强大的油猴脚本，利用浏览器的预加载技术，加速打开网页，打开网页速度加快 60% 以上。

原理：当您将鼠标悬停在链接上时，有 50％ 的机会单击链接，此时加速器会自动开始预加载页面到内存中，当您实际单击时（平均在 400 毫秒后），页面直接从内存中读取，节省了从网络下载的时间。
```
chrome-extension://dhdgffkkebhmkfjojejmpbldmpobfkfo/ask.html?aid=ef83c9c1-984e-4c59-a93e-956c5d683a71
```
## Userscript+-- : Show Site All UserJS num 显示适用的UserJS脚本数及跳转
在脚本菜单显示适用于当前网站的油猴脚本数及跳转 Show the num of all Tampermonkey scripts for the current site.

```
https://greasyfork.org/zh-CN/scripts/409727-userscript-show-site-all-userjs-num-%E6%98%BE%E7%A4%BA%E9%80%82%E7%94%A8%E7%9A%84userjs%E8%84%9A%E6%9C%AC%E6%95%B0%E5%8F%8A%E8%B7%B3%E8%BD%AC
```
## Mactype助手
Windows下的浏览器浏览网页时文字往往发虚，颜色很淡，看不清楚。有了它可以让浏览器中显示的文字更加清晰，支持Chrome ，360 ，QQ ，Firfox ，Edge 等浏览器。
```
https://greasyfork.org/zh-CN/scripts/436451-mactype%E5%8A%A9%E6%89%8B
```
强烈建议配合 XHei 字体使用，效果极佳。 字体下载地址(opens new window)
https://www.lanzouw.com/font
字体安装完成后在 Chrome 设置中搜索 “字体”，找到 自定义字体，将选项里的四个字体均设置为 XHei Intel

![image.png](/static/img/8dc68d47c01b5f1429226a53c4f8fb20.image.webp)

油猴插件整理

# 常用python脚本


## 天翼云obs 脚本拉取
### 依赖安装

```
pip3 install esdk-obs-python --trusted-host mirrors.huaweicloud.com -i https://mirrors.huaweicloud.com/repository/pypi/simple
```
### win版本
python3 
```
from obs import ObsClient
import os
import time
import traceback

# 硬编码AKSK
ak = "你的ak"
sk = "你的sk"
server = "https://obs.cn-hz1.ctyun.cn"

# 创建obsClient实例
obsClient = ObsClient(access_key_id=ak, secret_access_key=sk, server=server)

# 用来控制下载进度打印频率
last_print_time = 0

# 获取下载对象的进度
def callback(transferredAmount, totalAmount, totalSeconds):
    global last_print_time
    try:
        current_time = time.time()

        # 每1秒打印一次下载进度
        if current_time - last_print_time >= 10:
            download_speed = transferredAmount * 1.0 / totalSeconds / 1024  # KB/s
            download_percentage = transferredAmount * 100.0 / totalAmount  # %
            print(f"下载速度: {download_speed:.2f} KB/s, 下载进度: {download_percentage:.2f}%")
            last_print_time = current_time
    except Exception as e:
        print(f"进度回调出错: {e}")

# 递归下载文件
def download_files(bucketName, prefix, localDownloadPath):
    try:
        # 获取目录下的对象列表
        resp = obsClient.listObjects(bucketName=bucketName, prefix=prefix, delimiter='/')

        # 检查是否成功返回文件或子目录
        if resp.status < 300:
            if resp.body.contents:
                for content in resp.body.contents:
                    file_key = content['key']
                    file_name = os.path.basename(file_key)

                    # 如果是文件夹，则跳过
                    if file_name == '':
                        print(f"跳过文件夹: {file_key}")
                        continue

                    print(f"准备下载文件: {file_key}")  # 打印出文件名
                    local_file_path = os.path.join(localDownloadPath, file_key.replace('/', '\\'))
                    local_dir = os.path.dirname(local_file_path)

                    # 确保目录存在
                    if not os.path.exists(local_dir):
                        os.makedirs(local_dir)

                    # 单文件下载，不使用断点续传
                    print(f"开始下载文件: {file_key} 到 {local_file_path}")
                    resp = obsClient.getObject(bucketName, file_key, downloadPath=local_file_path, progressCallback=callback)

                    if resp.status < 300:
                        print(f"文件已下载到: {local_file_path}")
                    else:
                        print(f"文件下载失败: {file_key}")
                        print(f"错误信息: {resp.errorMessage}")

            # 如果有子目录，则递归处理子目录
            if resp.body.commonPrefixs:
                for commonPrefix in resp.body.commonPrefixs:
                    subdir_prefix = commonPrefix['prefix']
                    print(f"处理子目录: {subdir_prefix}")
                    download_files(bucketName, subdir_prefix, localDownloadPath)
        else:
            print('获取对象列表失败')
            print(f"错误信息: {resp.errorMessage}")

    except Exception as e:
        print('下载过程中发生错误')
        print('错误详情:', str(e))
        print(traceback.format_exc())
try:
    bucketName = ""  # 要操作的桶名称
    prefix = ""  # 要开始递归下载的父目录
    localDownloadPath = r"D:\pycharm\常用脚本整合\tianyiyun-obs"  # 本地下载路径

    print("开始下载...")
    download_files(bucketName, prefix, localDownloadPath)
    print("下载完成！")
except Exception as e:
    print('下载过程中发生错误')
    print('错误详情:', str(e))
    print(traceback.format_exc())
```
### linux脚本

```
[root@ecs-564e /bak]$ cat tianyiyun-obs.py 
from obs import ObsClient
import os
import time
import traceback

# 硬编码AKSK
ak = "你的ak"
sk = "你的sk"
server = "https://obs.cn-hz1.ctyun.cn"

# 创建obsClient实例
obsClient = ObsClient(access_key_id=ak, secret_access_key=sk, server=server)

# 用来控制下载进度打印频率
last_print_time = 0

# 获取下载对象的进度
def callback(transferredAmount, totalAmount, totalSeconds):
    global last_print_time
    try:
        current_time = time.time()

        # 每1秒打印一次下载进度
        if current_time - last_print_time >= 10:
            download_speed = transferredAmount * 1.0 / totalSeconds / 1024  # KB/s
            download_percentage = transferredAmount * 100.0 / totalAmount  # %
            print(f"下载速度: {download_speed:.2f} KB/s, 下载进度: {download_percentage:.2f}%")
            last_print_time = current_time
    except Exception as e:
        print(f"进度回调出错: {e}")

# 递归下载文件
def download_files(bucketName, prefix, localDownloadPath):
    try:
        # 获取目录下的对象列表
        resp = obsClient.listObjects(bucketName=bucketName, prefix=prefix, delimiter='/')

        # 检查是否成功返回文件或子目录
        if resp.status < 300:
            if resp.body.contents:
                for content in resp.body.contents:
                    file_key = content['key']
                    file_name = os.path.basename(file_key)

                    # 如果是文件夹，则跳过
                    if file_name == '':
                        print(f"跳过文件夹: {file_key}")
                        continue

                    print(f"准备下载文件: {file_key}")  # 打印出文件名
                    local_file_path = os.path.join(localDownloadPath, file_key.replace('/', os.sep))
                    local_dir = os.path.dirname(local_file_path)

                    # 确保目录存在
                    if not os.path.exists(local_dir):
                        os.makedirs(local_dir)

                    # 单文件下载，不使用断点续传
                    print(f"开始下载文件: {file_key} 到 {local_file_path}")
                    resp = obsClient.getObject(bucketName, file_key, downloadPath=local_file_path, progressCallback=callback)

                    if resp.status < 300:
                        print(f"文件已下载到: {local_file_path}")
                    else:
                        print(f"文件下载失败: {file_key}")
                        print(f"错误信息: {resp.errorMessage}")

            # 如果有子目录，则递归处理子目录
            if resp.body.commonPrefixs:
                for commonPrefix in resp.body.commonPrefixs:
                    subdir_prefix = commonPrefix['prefix']
                    print(f"处理子目录: {subdir_prefix}")
                    download_files(bucketName, subdir_prefix, localDownloadPath)
        else:
            print('获取对象列表失败')
            print(f"错误信息: {resp.errorMessage}")

    except Exception as e:
        print('下载过程中发生错误')
        print('错误详情:', str(e))
        print(traceback.format_exc())


try:
    bucketName = ""  # 要操作的桶名称
    prefix = ""  # 要开始递归下载的父目录
    localDownloadPath = "/bak"
    print("开始下载...")
    download_files(bucketName, prefix, localDownloadPath)
    print("下载完成！")
except Exception as e:
    print('下载过程中发生错误')
    print('错误详情:', str(e))
    print(traceback.format_exc())

```

python脚本

# jenkins pip插件使用

## 动态分支

1. Git Parameter Plugin：适用于手动选择分支。
2. Multibranch Pipeline Plugin：自动发现和构建分支。
3. Branch API Plugin：提供分支管理的 API。
4. GitHub Branch Source Plugin：针对 GitHub 的分支管理插件。

### 本场景使用的
![image.png](/static/img/2ed45e3c951f07727dafe2b5efa73615.image.webp)

![image.png](/static/img/ddf9fb2d3dc30eea656872315f15ec37.image.webp)

```
def createVersion() {
    // 定义一个版本号作为当次构建的版本，输出结果 年月日_构建ID 
    return new Date().format('yyyyMMdd') +"_${env.BUILD_ID}"
}

pipeline {
    agent any
    tools {
        jdk 'jdk1.8'  
    }
    // 在 environment 引入上边定义的函数，以便于全局调用
    environment {
        VERSION = createVersion()
        PROJECT = "single-enroll"
		sup = "dkdz-"+"${PROJECT}"+"-pre"
		ENV = "dkdz-api-pre"
        JAR_PATH="${PROJECT}"+"/target"
        SERVER_LIST="机器ip"
		
    }
 

    stages {
        stage('拉取代码') {
            steps {
                git branch: '${branch}',
                credentialsId: 'jenkins拉取gitlab认证',
                url: 'gitlaburl'
            }
        }

        stage('编译') {
            steps {
                sh 'mvn clean install -U'
            }
        }
        
        stage('发布') {
            steps {
                sh '/deploy/app/bin/build-api.sh ${SERVER_LIST} ${VERSION} ${PROJECT} ${WORKSPACE}/target ${ENV} ${sup}'
                deleteDir()
            }
        }  

        stage('版本信息'){
            steps{
             sh  'echo  版本信息 ==========   ${VERSION} '
            }
        }
        
   }    
}
```
## 钉钉通知
### DingTalk
![image.png](/static/img/2b91b4b483cfd47d2f3427186efbfb37.image.webp)
### 路由 ip/manage/dingtalk/
![image.png](/static/img/a9a5bdca199129443833c498fc690ceb.image.webp)


![image.png](/static/img/fab82e592b620c2d60ea420ddb7126b5.image.webp)

```
构建 URL：${BUILD_URL}

构建日志：${BUILD_URL}console

测试报告：${BUILD_URL}allure

提交分支：${branch}
```