SonarQube

#!/bin/bash
set -e
 
echo "=== SonarQube Installation Started ==="
 
# Backup configs
cp /etc/sysctl.conf /root/sysctl.conf_backup
cp /etc/security/limits.conf /root/sec_limit.conf_backup
 
# Kernel tuning (no ulimit here)
cat <<EOT> /etc/sysctl.conf
vm.max_map_count=262144
fs.file-max=65536
EOT
sysctl -p
 
# User limits
cat <<EOT> /etc/security/limits.conf
sonarqube   -   nofile   65536
sonarqube   -   nproc    4096
EOT
 
# Install Java 17
apt-get update -y
apt-get install openjdk-17-jdk wget curl unzip -y
 
# Check Java
java -version
 
# Install PostgreSQL
wget -q https://www.postgresql.org/media/keys/ACCC4CF8.asc -O - | apt-key add -
sh -c 'echo "deb http://apt.postgresql.org/pub/repos/apt/ $(lsb_release -cs)-pgdg main" >> /etc/apt/sources.list.d/pgdg.list'
apt-get update -y
apt-get install postgresql postgresql-contrib -y
systemctl enable postgresql
systemctl start postgresql
 
# Configure PostgreSQL
sudo -u postgres psql -c "CREATE USER sonar WITH ENCRYPTED PASSWORD 'admin123';"
sudo -u postgres psql -c "CREATE DATABASE sonarqube OWNER sonar;"
sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE sonarqube TO sonar;"
 
# Install SonarQube
mkdir -p /opt
cd /opt
curl -O https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-25.9.0.112764.zip
unzip -o sonarqube-25.9.0.112764.zip
mv sonarqube-25.9.0.112764 sonarqube
 
# Create SonarQube user
groupadd sonar || true
useradd -c "SonarQube - User" -d /opt/sonarqube/ -g sonar sonar || true
chown -R sonar:sonar /opt/sonarqube
 
# Configure SonarQube DB connection
cp /opt/sonarqube/conf/sonar.properties /root/sonar.properties_backup
cat <<EOT> /opt/sonarqube/conf/sonar.properties
sonar.jdbc.username=sonar
sonar.jdbc.password=admin123
sonar.jdbc.url=jdbc:postgresql://localhost/sonarqube
sonar.web.host=0.0.0.0
sonar.web.port=9000
sonar.web.javaAdditionalOpts=-server
sonar.search.javaOpts=-Xmx512m -Xms512m -XX:+HeapDumpOnOutOfMemoryError
sonar.log.level=INFO
sonar.path.logs=logs
EOT
 
# Create systemd service
cat <<EOT> /etc/systemd/system/sonarqube.service
[Unit]
Description=SonarQube service
After=syslog.target network.target
 
[Service]
Type=simple
User=sonar
Group=sonar
ExecStart=/opt/sonarqube/bin/linux-x86-64/sonar.sh console
Restart=always
LimitNOFILE=65536
LimitNPROC=4096
 
[Install]
WantedBy=multi-user.target
EOT
 
systemctl daemon-reload
systemctl enable sonarqube
systemctl start sonarqube
 
# Wait until SonarQube is up
echo "=== Waiting for SonarQube to start (this may take 1–3 minutes) ==="
until curl -s http://127.0.0.1:9000 > /dev/null; do
  sleep 10
  echo "Still starting..."
done
echo "SonarQube is now running!"
 
# Install Nginx reverse proxy
apt-get install nginx -y
rm -f /etc/nginx/sites-enabled/default /etc/nginx/sites-available/default
cat <<EOT> /etc/nginx/sites-available/sonarqube
server {
    listen      80;
    server_name _;
 
    access_log  /var/log/nginx/sonar.access.log;
    error_log   /var/log/nginx/sonar.error.log;
 
    proxy_buffers 16 64k;
    proxy_buffer_size 128k;
 
    location / {
        proxy_pass  http://127.0.0.1:9000;
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_redirect off;
 
        proxy_set_header    Host            \$host;
        proxy_set_header    X-Real-IP       \$remote_addr;
        proxy_set_header    X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Proto http;
    }
}
EOT
 
ln -s /etc/nginx/sites-available/sonarqube /etc/nginx/sites-enabled/sonarqube
systemctl enable nginx
systemctl restart nginx
 
# Firewall rules
ufw allow 80,9000,9001/tcp || true
 
# Get server IP
SERVER_IP=$(hostname -I | awk '{print $2}')
 
echo "======================================================"
echo " SonarQube installation completed successfully!"
echo " Access it via:  http://$SERVER_IP:9000/"
echo " Default login: admin / admin"
echo "======================================================"

environment {
        scannerHome = tool 'sonar7.2' #Tool name that we are setting here is used in our pipeline like this
    }

stage('Sonar Analysis') {
            steps {
                withSonarQubeEnv('sonar') #This sonar name is used in system , SonarQube Installation {

stage('Sonar Analysis') {
            steps {
                withSonarQubeEnv('sonar') #This sonar name is used in system , SonarQube Installation {
                    sh '''${scannerHome}/bin/sonar-scanner -Dsonar.projectKey=java-tomcat-sample \
                        -Dsonar.projectName=java-tomcat-sample \ #pom.xml filename
                        -Dsonar.projectVersion=4.0 \ #Project version is 4.0 now running.
                        -Dsonar.sources=src/ \ #path of source code
                        -Dsonar.junit.reportsPath=target/surefire-reports/ \
                        -Dsonar.jacoco.reportsPath=target/jacoco.exec \
                        -Dsonar.java.checkstyle.reportPaths=target/checkstyle-result.xml'''
                }

#!/bin/bash
 
# Exit on error
set -e
 
# Define Nexus version and download URL
NEXUS_VERSION="3.84.1-01"
NEXUS_URL="https://download.sonatype.com/nexus/3/nexus-${NEXUS_VERSION}-linux-x86_64.tar.gz"
NEXUS_DIR="nexus-$NEXUS_VERSION"
 
echo "Starting Nexus installation..."
 
# Install dependencies
echo "Installing Java and dependencies..."
sudo apt update
sudo apt install openjdk-17-jdk wget -y
 
# Create directories
echo "Creating directories..."
sudo mkdir -p /opt/nexus/
sudo mkdir -p /tmp/nexus/
 
# Download and extract Nexus
echo "Downloading Nexus..."
cd /tmp/nexus/
sudo wget $NEXUS_URL -O nexus.tar.gz
echo "Extracting Nexus..."
sudo tar xzvf nexus.tar.gz
sudo rm -f /tmp/nexus/nexus.tar.gz
 
# Move Nexus to installation directory
echo "Installing Nexus to /opt/nexus/"
sudo rsync -avzh /tmp/nexus/ /opt/nexus/
 
# Create nexus user
echo "Creating nexus user..."
if id "nexus" &>/dev/null; then
    echo "User nexus already exists."
else
    sudo useradd nexus
fi
 
# Set ownership
echo "Setting permissions..."
sudo chown -R nexus:nexus /opt/nexus
 
# Create systemd service
echo "Creating systemd service..."
cat <<EOT | sudo tee /etc/systemd/system/nexus.service > /dev/null
[Unit]
Description=nexus service
After=network.target
 
[Service]
Type=forking
LimitNOFILE=65536
ExecStart=/opt/nexus/$NEXUS_DIR/bin/nexus start
ExecStop=/opt/nexus/$NEXUS_DIR/bin/nexus stop
User=nexus
Restart=on-abort
 
[Install]
WantedBy=multi-user.target
EOT
 
# Configure Nexus to run as nexus user
echo "Configuring Nexus..."
sudo sh -c "echo 'run_as_user=\"nexus\"' > /opt/nexus/$NEXUS_DIR/bin/nexus.rc"
 
# Enable and start Nexus service
echo "Starting Nexus service..."
sudo systemctl daemon-reload
sudo systemctl enable nexus
sudo systemctl start nexus
 
# Wait for Nexus to start
echo "Waiting for Nexus to start (this may take a few minutes)..."
sleep 30
 
# Check if Nexus is running
if systemctl is-active --quiet nexus; then
    # Get server IP address
    IP_ADDRESS=$(hostname -I | awk '{print $2}')
 
    echo "=================================================="
    echo "Nexus installation completed successfully!"
    echo "Nexus is now running on: http://$IP_ADDRESS:8081"
    echo "=================================================="
    echo "Default credentials:"
    echo "Username: admin"
    echo "Password: Check /opt/nexus/$NEXUS_DIR/sonatype-work/nexus3/admin.password"
    echo "=================================================="
else
    echo "Nexus service failed to start. Please check logs with: journalctl -u nexus.service -b"
    exit 1
fi
 
# Clean up
sudo rm -rf /tmp/nexus/

stage("UploadArtifact") {
            steps {
                nexusArtifactUploader( #We need this artifact
                    nexusVersion: 'nexus3',
                    protocol: 'http',  #protocol that we are using, Currently we are running in http so .
                    nexusUrl: '192.168.56.5:8081/', #Ip of the machine in which nexus is running
                    groupId: 'QA',
                    version: "${env.BUILD_ID}-${env.BUILD_TIMESTAMP}", #Job build id and timestamp #If we don't use this all the artificats looks similar
                    repository: 'Java-app', #repo that we have created in the Nexus
                    credentialsId: 'nexus-cred', #Need to add credentails so that it can connect with nexus
                    artifacts: [
                        [artifactId: 'java-tomcat-sample', #Name ie; in the pom.xml file
                         classifier: '',
                         file: 'target/java-tomcat-maven-example.war', #PATH TO The war file
                         type: 'war']
                    ]
                )
            }
        }