Linux搭建Nexus仓库+高可用方案

Linux搭建nexus仓库

1.安装jdk

1.1 获取安装包，解压到指定目录：

tar xf jdk.tar.gz -C /opt/export

1.2 配置环境变量：

# vim /etc/profile
export JAVA_HOME=/opt/export/jdk
export PATH=$JAVA_HOME/bin:$PATH
export CLASSPATH=.:$JAVA_HOME/lib:$JAVA_HOME/jre/lib:$JAVA_HOME/lib/tools.jar
export RUN_AS_USER=root  # 后边启动nexus需要

# source /etc/profile

1.3 出现下面结果，说明部署成功

# java -version
java version "1.7.0_80"
Java(TM) SE Runtime Environment (build 1.7.0_80-b15)
Java HotSpot(TM) 64-Bit Server VM (build 24.80-b11, mixed mode)

2.安装nexus

2.1下载安装

下载地址：

https://www.sonatype.com/download-oss-sonatype
https://help.sonatype.com/repomanager2/download/download-archives---repository-manager-oss

cd /opt
tar xf nexus-2.4.0-09-bundle.tar.gz

解压后有两个目录：

$ ls /opt/
nexus-2.4.0-09  sonatype-work

更改目录名称：

mv nexus-2.4.0-09 nexus

2.2 更改nexus配置文件

默认端口为8081，可根据需要修改：

$ vim /opt/nexus/conf/nexus.properties
# Jetty section
application-port=8081  # 修改为10890
application-host=0.0.0.0
nexus-webapp=${bundleBasedir}/nexus
nexus-webapp-context-path=/nexus

# Nexus section
nexus-work=${bundleBasedir}/../sonatype-work/nexus
runtime=${bundleBasedir}/nexus/WEB-INF

2.3 关闭防火墙或打开10890端口

/etc/init.d/iptables stop
chkconfig iptables off

2.4 启动nexus

$ /opt/nexus/bin/jsw/linux-x86-64/nexus start
****************************************
WARNING - NOT RECOMMENDED TO RUN AS ROOT
****************************************
Starting Nexus OSS...
Started Nexus OSS.

如果没有配置环境变量RUN_AS_USER=root，会报错：

# /opt/nexus/bin/jsw/linux-x86-64/nexus start
****************************************
WARNING - NOT RECOMMENDED TO RUN AS ROOT
****************************************
If you insist running as root, then set the environment variable RUN_AS_USER=root before running this script.

2.5 检查进程和端口 

 3.浏览器访问nexus

http://ip地址:8081/nexus
登录，默认用户名 admin 默认密码 admin123

 访问登录：

4.迁移nexus

如果想要将nexus仓库迁移，只需要打包此目录，迁移到新nexus主机：

$ du -sh /opt/sonatype-work/nexus/storage
47G    /opt/sonatype-work/nexus/storage/

由于文件过大，可采用rsync的方式。

本文参考：https://blog.csdn.net/sunyanxiong123/article/details/68926610

Nexus高可用方案

描述：由于nexus进程会因为某些原因挂掉，为了不影响使用，决定做nexus高可用。

准备：根据上一章，准备两台服务器搭建nexus，主：192.168.51.204 maven01，备：192.168.51.207 maven02：

1.搭建keepalived

主：

# cat /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
   router_id maven01
}
vrrp_script chk_http_port {              #检测nexus端口是否存在，不存在进行vip漂移
    script "</dev/tcp/127.0.0.1/10890"
    interval 1
    weight -30
    fall 1
    rise 1
}
vrrp_instance VI_1 {
    state MASTER
    interface eth0
    virtual_router_id 88
    priority 150
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.51.210
    }
    track_script {
        chk_http_port
    }
}

备：

# cat /etc/keepalived/keepalived.conf
! Configuration File for keepalived

global_defs {
   router_id maven01
}
vrrp_script chk_http_port {
    script "</dev/tcp/127.0.0.1/10890"
    interval 1
    weight -30
    fall 1
    rise 1
}
vrrp_instance VI_1 {
    state MASTER
    interface eth0
    virtual_router_id 88
    priority 100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.51.210
    }
    track_script {
        chk_http_port
    }
}

2.同步数据

描述：对比同步数据方式，1⃣️定时任务rsync同步：不及时，容易遗漏数据。2⃣️nfs共享：能够解决数据一致问题，但是主一旦宕机，备库起不到任何作用。3⃣️sersync或者inotify+rsync：可以实现实时同步，最后选用inotify方式。

2.1 部署rsync

2.1.1 备：部署rsync服务端

安装rsync软件

yum install -y rsync

编写配置文件

$ cat /etc/rsyncd.conf
#created by yjn at 2018

uid = rsync
gid = rsync
use chroot = no
max connections = 10
strict modes = yes
pid file = /var/run/rsyncd.pid
lock file = /var/run/rsync.lock
log file = /var/log/rsyncd.log

[nexus]
path = /opt/sonatype-work/nexus/storage
comment = "nexus backup dir"
ignore errors
read only = no
write only = no
hosts allow = 192.168.0.0/16
auth users = rsync_backup
secrets file = /etc/rsync.password

创建备份目录的管理用户

useradd -s /sbin/nologin -M rsync

创建安全认证文件

echo "rsync_backup:123" >/etc/rsync.password
chmod 600 /etc/rsync.password

修改备份目录属主

chown -R rsync.rsync  /opt/sonatype-work/nexus/storage

启动rsync服务

rsync --daemon
说明：rsync服务的端口号为873端口（tcp）

2.1.2 主：部署rsync客户端

安装rsync软件

yum install -y rsync

创建安全认证文件

echo "123" >/etc/rsync.password
chmod 600 /etc/rsync.password

2.2 部署inotify-tools软件

inotify软件的参考资料链接：https://github.com/rvoicilas/inotify-tools/wiki

# yum install -y inotify-tools
Loaded plugins: fastestmirror, security
Setting up Install Process
Loading mirror speeds from cached hostfile
 * base: mirrors.zju.edu.cn
 * extras: mirror.bit.edu.cn
 * updates: mirrors.tuna.tsinghua.edu.cn
No package inotify-tools available.
Error: Nothing to do

没有这个包，更新epel源：

yum install -y epel-release && yum update

2.3 inotify+rsync结合脚本同步nexus

2.3.1 写同步脚本

#!/bin/bash
###########

inotifywait -mrq /opt/sonatype-work/nexus/storage  --format '%w%f'  -e create,delete,close_write,moved_to|
while read line
do
  rsync -az --delete  /opt/sonatype-work/nexus/storage/*  rsync_backup@192.168.51.207::nexus --password-file=/etc/rsync.password &>/dev/null
done

2.3.2 后台执行：

sh /yjn/scripts/backup.sh &

2.3.3 发现报错：

Failed to watch /opt/sonatype-work/nexus/storage; upper limit on inotify watches reached!
Please increase the amount of inotify watches allowed per user via `/proc/sys/fs/inotify/max_user_watches'.

　　注意：inotify默认监控同步文件的个数是有限制的，8192，通过配置文件/proc/sys/fs/inotify/max_user_watches可以调整监控的个数。此问题明显就是文件太多，导致无法监控。

 2.3.4 解决：

echo 8192000 > /proc/sys/fs/inotify/max_user_watches

此时再执行脚本，没有报错信息，验证可以同步。