Shulou(Shulou.com)06/02 Report--

Xiaobian this time to share with you is Docker how to build code detection platform SonarQube and detect maven project, the article is rich in content, interested partners can come to understand, I hope you can read this article after some harvest.

1 Introduction

Good code habits are a quality that a good programmer should have, but relying on people's habits and memories to ensure code quality is always not a reliable thing. In the computer industry should be aware that as long as it is artificial, there will be operational risks. This article explains how to build SonarQube, a code inspection platform with Docker, and use it to inspect code for maven projects.

2 Docker Install SonarQube

2.1 installation

Docker installation is convenient and quick. Just delete containers and images when you don't need them.

#Pull Sonar image docker pull sonarqube:8.3.1-community#Run instance docker run --name sonarqube -p 9000:9000 -d sonarqube:8.3.1-community

Then visit: http://localhost:9000/, the default administrator user and password is: admin/admin.

Choose the free Community version here, and there are also Developer, Enterprise and other paid versions, which are more powerful. The specific differences are as follows:

2.2 specified database

Usually we start a database ourselves such as Oracle, MySQL or PostgreSQL. The system information can be viewed in Administration-System. If we don't specify it, the default is to use the embedded H2 database. If you want to specify another database, you need to specify when starting Docker:

-e SONARQUBE_JDBC_USERNAME="xxx" \

-e SONARQUBE_JDBC_PASSWORD="***" \

-e SONARQUBE_JDBC_URL="jdbc:mysql://xxx"

There are some limitations to using the H2 database:

Embedded databases can only be used for test scenarios. Embedded databases cannot be extended, upgraded to newer versions of SonarQube, and support migrating your data to other database engines is not available.

Therefore, it is recommended not to use the embedded H2 database in actual use.

2.3 into the container

By order:

$ docker exec -it Container ID bashbash-5.0# lsCOPYING bin conf data elasticsearch extensions lib logs temp webbash-5.0#

Access to SonarQube containers. In the directory/opt/sonarqube, you can view configuration files, plug-ins, data files, log files, etc. The actual use should be mapped to the directory of the host machine, so restart an instance, and the data and configuration are still there.

2.4 mounting insert

SonarQube provides powerful plug-in management functions. Take the Chinese language pack as an example to explain how to install plug-ins:

Administration-Marketplace-Plugins, enter Chinese in the search box and you can choose to install it.

When the status is Install Pending, the plug-in installation is complete. Click Restart Server to take effect.

3 Code detection by maven

3.1 Use by account password

Specify the SonarQube platform address, and specify the username and password, you can detect the code, the specific command is as follows:

mvn clean verify sonar:sonar -Dsonar.host.url=http://localhost:9000 -Dsonar.login=admin -Dsonar.password=admin

3.2 Using Token Tokens

Of course, it is not a good habit to use admin directly and expose passwords. You can create users by configuring-permissions-users and create tokens.

Copy token: 9656c84090b2481db6ea97b6d14d87d546bff619.

In this way, it can be operated through tokens:

mvn clean verify sonar:sonar -Dsonar.host.url=http://localhost:9000 -Dsonar.login=9656c84090b2481db6ea97b6d14d87d546bff619

After executing the command, a new item will be automatically created on the interface and the detection result will be given:

Sonar provides many metrics such as test coverage, complexity, etc., which can greatly help us write better code:

4 summarizes

SonarQube is powerful and one of DevOps 'key tools that needs to be understood and mastered.

After reading this article about how Docker built SonarQube and tested maven projects, if you think the article is well written, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.