SonarQube and Nexus in a Jenkins Pipeline

#!/bin/bash
set -e
 
echo "=== SonarQube Installation Started ==="
 
# Kernel limits for SonarQube's embedded Elasticsearch
cat <<EOT > /etc/sysctl.d/99-sonarqube.conf
vm.max_map_count=524288
fs.file-max=131072
EOT
sysctl --system
 
# User limits for the sonar user
cat <<EOT > /etc/security/limits.d/99-sonarqube.conf
sonar   -   nofile   131072
sonar   -   nproc    8192
EOT
 
# Install Java 17
apt-get update -y
apt-get install openjdk-17-jdk wget curl unzip ca-certificates -y
java -version
 
# Install PostgreSQL from the PostgreSQL apt repository
install -d /usr/share/postgresql-common/pgdg
curl -o /usr/share/postgresql-common/pgdg/apt.postgresql.org.asc --fail https://www.postgresql.org/media/keys/ACCC4CF8.asc
echo "deb [signed-by=/usr/share/postgresql-common/pgdg/apt.postgresql.org.asc] https://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list
apt-get update -y
apt-get install postgresql postgresql-contrib -y
systemctl enable postgresql
systemctl start postgresql
 
# Create the database and its user (lab password, change it)
sudo -u postgres psql -c "CREATE USER sonar WITH ENCRYPTED PASSWORD 'admin123';"
sudo -u postgres psql -c "CREATE DATABASE sonarqube OWNER sonar;"
sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE sonarqube TO sonar;"
 
# Install SonarQube
mkdir -p /opt
cd /opt
curl -O https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-25.9.0.112764.zip
unzip -o sonarqube-25.9.0.112764.zip
mv sonarqube-25.9.0.112764 sonarqube
 
# Create the sonar user and give it the install folder
groupadd sonar || true
useradd -c "SonarQube - User" -d /opt/sonarqube/ -g sonar sonar || true
chown -R sonar:sonar /opt/sonarqube
 
# Point SonarQube at PostgreSQL
cp /opt/sonarqube/conf/sonar.properties /root/sonar.properties_backup
cat <<EOT > /opt/sonarqube/conf/sonar.properties
sonar.jdbc.username=sonar
sonar.jdbc.password=admin123
sonar.jdbc.url=jdbc:postgresql://localhost/sonarqube
sonar.web.host=0.0.0.0
sonar.web.port=9000
sonar.web.javaAdditionalOpts=-server
sonar.search.javaOpts=-Xmx512m -Xms512m -XX:+HeapDumpOnOutOfMemoryError
sonar.log.level=INFO
sonar.path.logs=logs
EOT
 
# systemd service
cat <<EOT > /etc/systemd/system/sonarqube.service
[Unit]
Description=SonarQube service
After=syslog.target network.target
 
[Service]
Type=simple
User=sonar
Group=sonar
ExecStart=/opt/sonarqube/bin/linux-x86-64/sonar.sh console
Restart=always
LimitNOFILE=131072
LimitNPROC=8192
 
[Install]
WantedBy=multi-user.target
EOT
 
systemctl daemon-reload
systemctl enable sonarqube
systemctl start sonarqube
 
echo "=== Waiting for SonarQube to start (this may take 1-3 minutes) ==="
until curl -s http://127.0.0.1:9000 > /dev/null; do
  sleep 10
  echo "Still starting..."
done
echo "SonarQube is now running!"
 
# Nginx reverse proxy on port 80
apt-get install nginx -y
rm -f /etc/nginx/sites-enabled/default /etc/nginx/sites-available/default
cat <<EOT > /etc/nginx/sites-available/sonarqube
server {
    listen      80;
    server_name _;
 
    access_log  /var/log/nginx/sonar.access.log;
    error_log   /var/log/nginx/sonar.error.log;
 
    proxy_buffers 16 64k;
    proxy_buffer_size 128k;
 
    location / {
        proxy_pass  http://127.0.0.1:9000;
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
        proxy_redirect off;
 
        proxy_set_header    Host            \$host;
        proxy_set_header    X-Real-IP       \$remote_addr;
        proxy_set_header    X-Forwarded-For \$proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Proto http;
    }
}
EOT
 
ln -s /etc/nginx/sites-available/sonarqube /etc/nginx/sites-enabled/sonarqube
systemctl enable nginx
systemctl restart nginx
 
ufw allow 80,9000,9001/tcp || true
 
# On Vagrant the second address is the private network IP
SERVER_IP=$(hostname -I | awk '{print $2}')
 
echo "======================================================"
echo " SonarQube installation completed successfully!"
echo " Access it via:  http://$SERVER_IP:9000/"
echo " Default login: admin / admin"
echo "======================================================"

environment {
    scannerHome = tool 'sonar7.2'   // name from Manage Jenkins → Tools
}

stage('Sonar Analysis') {
    steps {
        // 'sonar' is the server name from Manage Jenkins → System
        withSonarQubeEnv('sonar') {
            sh '''${scannerHome}/bin/sonar-scanner \
                -Dsonar.projectKey=java-tomcat-sample \
                -Dsonar.projectName=java-tomcat-sample \
                -Dsonar.projectVersion=4.0 \
                -Dsonar.sources=src/ \
                -Dsonar.junit.reportPaths=target/surefire-reports/ \
                -Dsonar.coverage.jacoco.xmlReportPaths=target/site/jacoco/jacoco.xml \
                -Dsonar.java.checkstyle.reportPaths=target/checkstyle-result.xml'''
        }
    }
}

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
  <modelVersion>4.0.0</modelVersion>
  <groupId>com.example</groupId>
  <artifactId>java-tomcat-sample</artifactId>
  <packaging>war</packaging>
  <version>1.0.1</version>
  <name>hello Maven Webapp</name>

#!/bin/bash
set -e
 
NEXUS_VERSION="3.84.1-01"
NEXUS_URL="https://download.sonatype.com/nexus/3/nexus-${NEXUS_VERSION}-linux-x86_64.tar.gz"
NEXUS_DIR="nexus-$NEXUS_VERSION"
 
echo "Starting Nexus installation..."
 
echo "Installing Java and dependencies..."
sudo apt update
sudo apt install openjdk-17-jdk wget -y
 
echo "Creating directories..."
sudo mkdir -p /opt/nexus/
sudo mkdir -p /tmp/nexus/
 
echo "Downloading Nexus..."
cd /tmp/nexus/
sudo wget $NEXUS_URL -O nexus.tar.gz
echo "Extracting Nexus..."
sudo tar xzvf nexus.tar.gz
sudo rm -f /tmp/nexus/nexus.tar.gz
 
# The archive holds two folders: nexus-<version> (the app) and sonatype-work (the data)
echo "Installing Nexus to /opt/nexus/"
sudo rsync -avzh /tmp/nexus/ /opt/nexus/
 
echo "Creating nexus user..."
if id "nexus" &>/dev/null; then
    echo "User nexus already exists."
else
    sudo useradd nexus
fi
 
echo "Setting permissions..."
sudo chown -R nexus:nexus /opt/nexus
 
echo "Creating systemd service..."
cat <<EOT | sudo tee /etc/systemd/system/nexus.service > /dev/null
[Unit]
Description=nexus service
After=network.target
 
[Service]
Type=forking
LimitNOFILE=65536
ExecStart=/opt/nexus/$NEXUS_DIR/bin/nexus start
ExecStop=/opt/nexus/$NEXUS_DIR/bin/nexus stop
User=nexus
Restart=on-abort
 
[Install]
WantedBy=multi-user.target
EOT
 
echo "Configuring Nexus..."
sudo sh -c "echo 'run_as_user=\"nexus\"' > /opt/nexus/$NEXUS_DIR/bin/nexus.rc"
 
echo "Starting Nexus service..."
sudo systemctl daemon-reload
sudo systemctl enable nexus
sudo systemctl start nexus
 
echo "Waiting for Nexus to start (this may take a few minutes)..."
sleep 30
 
if systemctl is-active --quiet nexus; then
    IP_ADDRESS=$(hostname -I | awk '{print $2}')
 
    echo "=================================================="
    echo "Nexus installation completed successfully!"
    echo "Nexus is now running on: http://$IP_ADDRESS:8081"
    echo "=================================================="
    echo "Default credentials:"
    echo "Username: admin"
    echo "Password: Check /opt/nexus/sonatype-work/nexus3/admin.password"
    echo "=================================================="
else
    echo "Nexus service failed to start. Please check logs with: journalctl -u nexus.service -b"
    exit 1
fi
 
sudo rm -rf /tmp/nexus/

$ sudo cat /opt/nexus/sonatype-work/nexus3/admin.password

stage("UploadArtifact") {
    steps {
        nexusArtifactUploader(
            nexusVersion: 'nexus3',
            protocol: 'http',
            nexusUrl: '192.168.56.5:8081',
            groupId: 'QA',
            version: "${env.BUILD_ID}-${env.BUILD_TIMESTAMP}",
            repository: 'Java-app',
            credentialsId: 'nexus-cred',
            artifacts: [
                [artifactId: 'java-tomcat-sample',
                 classifier: '',
                 file: 'target/java-tomcat-maven-example.war',
                 type: 'war']
            ]
        )
    }
}