## docker-compose 安装部署

```bash
mkdir jenkins_home
chown -R 1000:1000 ./jenkins_home
```

- docker-compose.yml
```yaml
version: "3"

services:
  caddy:
    container_name: caddy
    image: caddy:alpine
    restart: unless-stopped
    ports:
      - "80:80"
      - "80:80/udp"
      - "443:443"
      - "443:443/udp"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
  jenkins:
    container_name: jenkins
    image: jenkins/jenkins:lts-jdk11
    restart: unless-stopped
    volumes:
      # chown -R 1000:1000 ./jenkins_home
      - ./jenkins_home:/var/jenkins_home
```

- Caddyfile
```Caddyfile
jenkins.uing.vip {
  log {
    output stdout
    format console
    level  ERROR
  }
  reverse_proxy jenkins:8080
}
```

Jenkins - CI/CD（持续集成、持续交付和持续部署）

## docker-compose 安装部署

- docker-compose.yml
```yaml
version: "3"

services:
  caddy:
    container_name: caddy
    image: caddy:alpine
    restart: unless-stopped
    ports:
      - "80:80"
      - "80:80/udp"
      - "443:443"
      - "443:443/udp"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
  portainer:
    container_name: portainer
    image: portainer/portainer-ce:latest
    command: -H unix:///var/run/docker.sock
    restart: unless-stopped
    # ports:
    #   - 8000:8000
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./portainer:/data

  redis:
    container_name: redis
    image: redis:alpine
    restart: unless-stopped
    volumes:
      - ./redis:/data
```

- Caddyfile
```Caddyfile
portainer.uing.vip {
  log {
    output stdout
    format console
    level  ERROR
  }
  reverse_proxy portainer:9000
}
```

Portainer - 容器运行监控管理

# Gitea 安装部署

## 配置 SSH 直通（可选，不需要 SSH 协议同步无需此步骤，可以使用 https/http 协议同步代替）
```bash
# 记录下 UID/GID 替换中的 USER_UID USER_GID
sudo adduser --system --shell /bin/bash --gecos 'Git Version Control' --group --disabled-password --home /home/git git
# 生成 SSH 密钥对
sudo -u git ssh-keygen -t rsa -b 4096 -C "Gitea Host Key"

# ----------------------------------------------------------------

sudo -u git cat /home/git/.ssh/id_rsa.pub | sudo -u git tee -a /home/git/.ssh/authorized_keys
sudo -u git chmod 600 /home/git/.ssh/authorized_keys

cat <<"EOF" | sudo tee /usr/local/bin/gitea
#!/bin/sh
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
EOF
sudo chmod +x /usr/local/bin/gitea
```

## docker-compose 安装部署
- docker-compose.yml
```yaml
version: "3"

services:
  caddy:
    container_name: caddy
    image: caddy:alpine
    restart: unless-stopped
    ports:
      - "80:80"
      - "80:80/udp"
      - "443:443"
      - "443:443/udp"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
  gitea:
    container_name: gitea
    image: gitea/gitea:latest
    restart: unless-stopped
    # depends_on:
    #   - redis
    environment:
      - USER=git
      - USER_UID=111
      - USER_GID=122
    volumes:
      - ./gitea:/data
      - /home/git/.ssh:/data/git/.ssh
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "127.0.0.1:2222:22"


  # redis:
  #   container_name: redis
  #   image: redis:alpine
  #   restart: unless-stopped
  #   volumes:
  #     - ./redis:/data
```

- Caddyfile
```Caddyfile
:80 {
  redir https://{host}{uri}
}
gitea.uing.vip {
  log {
    output stdout
    format console
    level  ERROR
  }
  reverse_proxy gitea:3000
}
```

## 启用 Gitea Actions 内置的 CI/CD （持续集成、持续交付和持续部署）解决方案

### 配置 Gitea 服务器
```bash
cat << EOF >> gitea/gitea/conf/app.ini
[actions]
ENABLED=true
EOF
docker-compose restart gitea
```

### 生成  Gitea Runner 配置文件
```
mkdir gitea_runner && cd gitea_runner
docker run --entrypoint="" --rm -it gitea/act_runner:latest act_runner generate-config > config.yaml
```

### docker-compose 安装 Gitea Runner 部署
- docker-compose.yml
```yaml
version: "3"

services:
  gitea_runner:
    container_name: gitea_runner
    image: gitea/act_runner:latest
    # 如果使用服务器容器名称作为 URL HOST 的话，需要先启动 Gitea
    depends_on:
      - gitea
    environment:
      CONFIG_FILE: /config.yaml
      # Gitea 服务器地址（也可以是内网地址或者容器内部地址）
      GITEA_INSTANCE_URL: https://gitea.uing.vip
      # 获取地址 https://gitea.uing.vip/admin/actions/runners/
      GITEA_RUNNER_REGISTRATION_TOKEN: ""
      # Runner名称（可选）。如果留空，将使用主机名
      GITEA_RUNNER_NAME: ""
      GITEA_RUNNER_LABELS: ""
    volumes:
      - ./gitea_runner/config.yaml:/config.yaml
      - ./gitea_runner/data:/data
      - /var/run/docker.sock:/var/run/docker.sock
```

## 配置仓库启用 Gitea Actions

1. 打开仓库设置 https://gitea.uing.vip/\<owner\>/\<repo\>/settings
2. 找到并勾选 **启用 Actions** ，并 **更新仓库设置** 保存设置

![enable_actions](/static/img/d32bf0a67ee84027af617b96fac509dc.1693367900388.png)

3. 在仓库代码下新建目录 **.gitea/workflows/**，新建 Yaml 文件编写 Gitea Actions 执行代码
```bash
git clone git@gitea.uing.vip:cainiao/gitea_runner.git

cd gitea_runner && mkdir -p .gitea/workflows/

cat <<"EOF" > .gitea/workflows/demo.yaml
name: Gitea Actions Demo
run-name: ${{ gitea.actor }} is testing out Gitea Actions 🚀
on: [push]

jobs:
  Explore-Gitea-Actions:
    runs-on: ubuntu-latest
    steps:
      - run: echo "🎉 The job was automatically triggered by a ${{ gitea.event_name }} event."
      - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by Gitea!"
      - run: echo "🔎 The name of your branch is ${{ gitea.ref }} and your repository is ${{ gitea.repository }}."
      - name: Check out repository code
        uses: actions/checkout@v3
      - run: echo "💡 The ${{ gitea.repository }} repository has been cloned to the runner."
      - run: echo "🖥️ The workflow is now ready to test your code on the runner."
      - name: List files in the repository
        run: |
          ls ${{ gitea.workspace }}
      - run: echo "🍏 This job's status is ${{ job.status }}."
EOF

git add .gitea/workflows/demo.yaml
git commit -m "add .gitea/workflows/demo.yaml"
git push
```
4. 在仓库的 Actions 下查看到执行过程及结果：https://gitea.uing.vip/\<owner\>/\<repo\>/actions


## 相关连接
- (Configuration Cheat Sheet)[https://docs.gitea.com/administration/config-cheat-sheet]

Gitea - 代码项目管理

# Git 笔记

## 从主仓库更新代码到 fork 仓库
```shell
git remote -v
git remote add github https://github.com/chenxiangfang/Main.git
git fetch github
git merge github/master
git push
```

## 从 github 中拉取变更同步到本地，并提交到 fork 仓库
```shell
git fetch github
git merge github/master
git push
git fetch github --all
git push origin --all
```

## 配置 Git 提交时的邮箱和用户名
```shell
# 全局修改
git config --global user.email "XXX@XXX.com"
git config --global user.name "cainiao"
# 当前仓库修改
git config user.email "XXX@XXX.com"
git config user.name "cainiao"
```

## 设置 HTTP/HTTPS 免密登录（git clone 第二次不需要再次输入密码了）
```bash
git config --global credential.helper store
```

## 设置 HTTP 代理
```bash
# 设置代理
git config --global http.proxy http://proxyUsername:proxyPassword@proxy.server.com:port
git config --global https.proxy https://proxyUsername:proxyPassword@proxy.server.com:port

# 取消代理
git config --global --unset http.proxy
```

## 线上Git仓库把 **master** 主分支改为了 **main** 主分支
```bash
# Switch to the "master" branch:
git checkout master

# Rename it to "main":
git branch -m master main

# Get the latest commits (and branches!) from the remote:
git fetch

# Remove the existing tracking connection with "origin/master":
git branch --unset-upstream

# Create a new tracking connection with the new "origin/main" branch:
git branch -u origin/main
```

## 我的一些全局 Git 配置
```shell
git config --global http.proxy socks5://127.0.0.1:1080
git config --global https.proxy socks5://127.0.0.1:1080

git config --global user.email "565499699@qq.com"
git config --global user.name "Xiangfang Chen"

git config --global core.autocrlf false
git config --global core.filemode false
git config --global core.preloadindex true
git config --global core.fscache true
git config --global branch.autosetuprebase always
git config --global core.longpaths true
```

## 一些错误的解决方案
> Git command returns fatal error: "detected dubious ownership"
> fatal: unsafe repository(XXXX is owned by someone else.)
```shell
# windows:
takeown /r /d y /f <PATH>
# linux:
chown -R username:group <PATH>

# 或者忽略全部文件夹
git config --global --add safe.directory "*"
```

> Filename too long.
```shell
git config --global core.longpaths true
```



Git 笔记

## CentOS 7 网络配置

```shell
# 网络配置
sed -i 's/ONBOOT="no"/ONBOOT="yes"/g' /etc/sysconfig/network-scripts/ifcfg-eth0
sed -i 's/IPV6INIT="yes"/IPV6INIT="no"/g' /etc/sysconfig/network-scripts/ifcfg-eth0
sed -i 's/BOOTPROTO="dhcp"/BOOTPROTO="none"/g' /etc/sysconfig/network-scripts/ifcfg-eth0

sed -i 's/ONBOOT=no/ONBOOT=yes/g' /etc/sysconfig/network-scripts/ifcfg-eth0
sed -i 's/IPV6INIT=yes/IPV6INIT=no/g' /etc/sysconfig/network-scripts/ifcfg-eth0
sed -i 's/BOOTPROTO=dhcp/BOOTPROTO=none/g' /etc/sysconfig/network-scripts/ifcfg-eth0

cat << EOF >> /etc/sysconfig/network-scripts/ifcfg-eth0
IPADDR=192.168.2.23
PREFIX=16
GATEWAY=192.168.1.1
DNS1=114.114.114.114
DNS2=192.168.1.1
EOF
cat << EOF >/etc/hostname
QRadarCE
EOF
```

## CentOS 7 安装必备包

```shell
# 必备软件
yum install -y epel-release
yum update -y
yum install -y bash-completion bash-completion-extras sudo openssh-server
systemctl enable sshd
systemctl start sshd
ln -s -f /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
reboot
```



## CentOS 6 安装必备包

```shell
mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-vault-6.10.repo
yum clean all && yum makecache
yum install -y epel-release
yum update -y
yum install -y bash-completion bash-completion-extras sudo openssh-server
echo "PermitRootLogin yes" | tee /etc/ssh/sshd_config

ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key
ssh-keygen -t ecdsa -f /etc/ssh/ssh_host_ecdsa_key
ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key

chkconfig sshd on
service sshd start
ln -s -f /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
```

## Extra Packages for Enterprise Linux (EPEL)

```shell
yum install -y epel-release
```

## ELRepo Project

Import the public key:  
```shell
rpm --import https://www.elrepo.org/RPM-GPG-KEY-elrepo.org
```

To install ELRepo for RHEL-9:  
```bash
yum install https://www.elrepo.org/elrepo-release-9.el9.elrepo.noarch.rpm
```

To install ELRepo for RHEL-8:
```shell
yum install https://www.elrepo.org/elrepo-release-8.el8.elrepo.noarch.rpm
```

To install ELRepo for RHEL-7, SL-7 or CentOS-7:
```shell
yum install https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
```

安装长期支持内核（lt = long time）
```shell
yum --enablerepo=elrepo-kernel -y install kernel-lt
```
安装稳定主线内核kernel-ml（ml=mainline）
```shell
yum --enablerepo=elrepo-kernel -y install kernel-ml
```

### 红帽软件集合

https://access.redhat.com/support/policy/updates/rhscl-rhel7

```shell
yum install centos-release-scl –y
```

安装 GCC 9
```shell
yum install devtoolset-9-toolchain –y
# 临时使用
scl enable devtoolset-9 bash
source scl_source enable devtoolset-9

安装 GCC 7
```shell
yum install devtoolset-7-toolchain –y
# 临时使用
scl enable devtoolset-7 bash
source scl_source enable devtoolset-7
```


安装 Python 3.8
```shell
yum install rh-python38 rh-python38-python-devel –y
# 临时使用
scl enable rh-python38 bash
source scl_source enable rh-python38
```

## MySQL Server 5.7
```shell
yum install -y http://repo.mysql.com/mysql57-community-release-el7.rpm
rpm -import http://repo.mysql.com/RPM-GPG-KEY-mysql-2022

yum install mysql-server -y

systemctl enable mysqld
systemctl start mysqld

grep 'temporary password'  /var/log/mysqld.log
```

## MySQL Server 8.0
```shell
yum install -y https://repo.mysql.com/mysql80-community-release-el7.rpm
rpm -import http://repo.mysql.com/RPM-GPG-KEY-mysql-2022

yum install mysql-server -y

systemctl enable mysqld
systemctl start mysqld

grep 'temporary password'  /var/log/mysqld.log
```

## Nginx
```shell
yum install -y https://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm
yum install -y nginx
systemctl enable nginx
systemctl start nginx
```

## Redis 3.2
```shell
yum install -y redis
systemctl enable redis
systemctl start redis
```

## Redis 6
```shell
yum install -y \
https://repo.ius.io/ius-release-el7.rpm \
https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
yum install -y redis6
systemctl enable redis
systemctl start redis
```

## OpenJDK
```shell
# openjdk 8
yum install -y java-1.8.0-openjdk java-1.8.0-openjdk-devel

# openjdk 11
yum install -y java-11-openjdk java-11-openjdk-devel
```