Jenkins + Ansible + Gitlab（四）

小咪咪 2023-06-07 13:26 61阅读 0赞

版本控制系统    Gitlab Github
    
    持续集成工具    Jenkins
    
    部署工具    Ansible Saltstack Chef

本文通过`Jenkins + Ansible + Gitlab`实现自动化部署。

--------------------

*  角色划分：

Jenkins + Ansible   192.168.30.128
    
    test host   192.168.30.129
    
    gitlab  192.168.30.130

前面已经搭建了`Jenkins + Ansible + Gitlab`环境，接下来就到了自动化部署环节。

--------------------

### Freestyle Job自动化部署 ###

使用freestyle job自动化部署静态网页。

*  gitlab创建`ansible-playbook-repo`项目：

点击右上方`+` → `New porject`，`Project name`输入ansible-playbook-repo，`Visibility Level`选择默认的`Private`即可，最后点击`Create project`创建项目。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70]

*  clone`ansible-playbook-repo`项目：

任选一台其它机器，

# yum install -y git
    
    # echo '192.168.30.130 gitlab.lzxlinux.com' >> /etc/hosts
    
    # mkdir /home/repo && cd /home/repo
    
    # git config --global user.name "admin"
    
    # git config --global user.email "admin@lzxlinux.com"
    
    # git config --global http.sslVerify false
    
    # git clone https://gitlab.lzxlinux.com/root/ansible-playbook-repo.git
    
    Cloning into 'ansible-playbook-repo'...
    Username for 'https://gitlab.lzxlinux.com': root
    Password for 'https://root@gitlab.lzxlinux.com': 
    warning: You appear to have cloned an empty repository.

*  编写ansible-playbook：

files

# cd ansible-playbook-repo/
    
    # mkdir nginx_playbooks && cd nginx_playbooks
    
    # vim deploy.yml
    
    - hosts: nginx
      remote_user: root
      gather_facts: True
    
      roles:
        - nginx
        
    # mkdir inventory && cd inventory
    
    # vim dev
    
    [nginx]
    test.lzxlinux.com
    
    [nginx:vars]
    server_name=test.lzxlinux.com
    port=80
    user=deploy
    worker_processes=1
    max_open_file=65505
    root=/www
    
    # cp dev prod
    
    # cd ..
    
    # mkdir roles && cd roles
    
    # mkdir nginx && cd nginx
    
    # mkdir files tasks templates
    
    # cd files/
    
    # vim health_check.sh
    
    #!/bin/bash
    URL=$1
    curl -Is http://$URL > /dev/null && echo "The remote side is healthy" || echo "The remote side is failed, please check"
    
    # echo "This is my first website" > index.html

templates

# cd .. && cd templates
    
    # vim nginx.conf.j2
    
    user { {  user }};
    worker_processes  { {  worker_processes }};
    error_log /var/log/nginx/error.log;
    pid /var/run/nginx.pid;
    worker_rlimit_nofile 65535;
    
    events { 
        use epoll;
        worker_connections { {  max_open_file }};
        multi_accept on;
    }
    
    http { 
        include       mime.types;
        default_type  application/octet-stream;
    
        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';
    
        access_log  /var/log/nginx/access.log  main;
    
        server_tokens       off;
        sendfile            on;
        send_timeout        3m;
        tcp_nopush          on;
        tcp_nodelay         on;
        keepalive_timeout   65;
        types_hash_max_size 2048;
    
        #gzip on;
    
        server { 
            listen { {  port }} default_server;
            server_name { {  server_name }};
    
            location / { 
                root { {  root }};
                index index.html index.htm;
            }
    
            error_page   404  /404.html;
            location = /404.html { 
                root   html;
            }
        }
    }

tasks

# cd .. && cd tasks
    
    # vim main.yml
    
    - name: Disable system firewalld
      service: name=firewalld state=stopped enabled=no
    
    - name: Disable SELINUX
      selinux: state=disabled
    
    - name: Setup nginx yum source
      yum: name=epel-release state=latest
    
    - name: Yum install nginx
      yum: name=nginx state=latest
      
    - name: Write then nginx config file
      template: src=roles/nginx/templates/nginx.conf.j2 dest=/etc/nginx/nginx.conf
    
    - name: Create nginx root folder
      file: "name={ { root }} state=directory owner={ { user }} group={ { user }} mode=0755"
    
    - name: Copy index.html to remote
      copy: "remote_src=no src=roles/nginx/files/index.html dest={ { root }}/index.html mode=0755"
    
    - name: Start nginx service
      service: name=nginx state=started enabled=yes
    
    - name: Copy health_check.sh to remote 
      copy: "remote_src=no src=roles/nginx/files/health_check.sh dest=/tmp/health_check.sh mode=0755"
    
    - name: Run the health_check.sh 
      shell: "sh /tmp/health_check.sh { { server_name }}"
      register: health_status
    
    - debug: msg="{ { health_status.stdout }}"

*  将ansible-playbook提交到gitlab：

# cd /home/repo/ansible-playbook-repo/nginx_playbooks/
    
    # tree .
    .
    ├── deploy.yml
    ├── inventory
    │   ├── dev
    │   └── prod
    └── roles
        └── nginx
            ├── files
            │   ├── health_check.sh
            │   └── index.html
            ├── tasks
            │   └── main.yml
            └── templates
                └── nginx.conf.j2
    
    6 directories, 7 files

# git add .
    
    # git commit -m "This is my first commit"
    
    [master (root-commit) 475fd34] This is my first commit
     7 files changed, 107 insertions(+)
     create mode 100644 nginx_playbooks/deploy.yml
     create mode 100644 nginx_playbooks/inventory/dev
     create mode 100644 nginx_playbooks/inventory/prod
     create mode 100644 nginx_playbooks/roles/nginx/files/health_check.sh
     create mode 100644 nginx_playbooks/roles/nginx/files/index.html
     create mode 100644 nginx_playbooks/roles/nginx/tasks/main.yml
     create mode 100644 nginx_playbooks/roles/nginx/templates/nginx.conf.j2
    
    # git push origin master
    
    Username for 'https://gitlab.lzxlinux.com': root
    Password for 'https://root@gitlab.lzxlinux.com': 
    Counting objects: 15, done.
    Delta compression using up to 2 threads.
    Compressing objects: 100% (10/10), done.
    Writing objects: 100% (15/15), 1.97 KiB | 0 bytes/s, done.
    Total 15 (delta 0), reused 0 (delta 0)
    To https://gitlab.lzxlinux.com/root/ansible-playbook-repo.git
     * [new branch]      master -> master

刷新gitlab后台，查看ansible-playbook-repo项目

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 1]

*  freestyle job构建与自动化部署：

点击`新建任务`，任务名称输入`nginx-freestyle-job`，选择`自由风格的软件项目`。

添加描述信息：`This is my first nginx freestyle job`，勾选`参数化构建过程`，添加`选项参数`和`文本参数`

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 2]

接着`源码管理`这里勾选`Git`，写入ansible-playbook-repo这个项目地址，然后选择之前添加的git凭据。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 3]

接着`构建` → `增加构建步骤` → `执行 shell`，写入下面内容

#!/bin/bash
    
    set +x              #关闭命令行扩展环境功能
    
    source /home/deploy/.py3-a2.8-env/bin/
    source /home/deploy/.py3-a2.8-env/ansible/hacking/env-setup -q
    
    cd $WORKSPACE/nginx_playbooks
    ansible --version
    ansible-playbook --version
    
    ansible-playbook -i inventory/$deploy_env ./deploy.yml -e project=nginx -e branch=$branch -e env=$deploy_env
    
    set -x

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 4]

点击`应用`，再点击`保存`。接着点击`Build with Parameters`，选择对应的`选项参数`，选择好后点击`开始构建`。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 5]

等待构建完成，查看控制台输出

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 6]

打开浏览器，访问`test.lzxliux.com`

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 7]

使用freestyle job自动化部署静态网页的过程到此成功结束。

--------------------

### Pipeline Job自动化部署 ###

使用pipeline job自动化部署wordpress。

在上面克隆过`ansible-playbook-repo`项目的机器上操作。

*  编写ansible-playbook：

files

# cd /home/repo/ansible-playbook-repo/
    
    # mkdir wordpress_playbooks && cd wordpress_playbooks
    
    # vim deploy.yml
    
    - hosts: wordpress
      remote_user: root
      gather_facts: True
      vars:
        backup_to: "{ {root}}_{ {branch}}_{ {ansible_date_time.epoch}}"
     
      roles:
        - wordpress
        
    # mkdir inventory && cd inventory
    
    # vim dev
    
    [wordpress]
    test.lzxlinux.com
    
    [wordpress:vars]
    server_name=test.lzxlinux.com
    port=8080
    user=deploy
    worker_processes=1
    max_open_file=65505
    root=/data/www
    gitlab_user='root'              #gitlab账号及密码
    gitlab_pass='123456789'
    
    # vim prod
    
    [wordpress]
    test.lzxlinux.com
    
    [wordpress:vars]
    server_name=test.lzxlinux.com
    port=80
    user=deploy
    worker_processes=1
    max_open_file=65505
    root=/data/www
    gitlab_user='root'
    gitlab_pass='123456789'
    
    # cd ..
    
    # mkdir roles && cd roles
    
    # mkdir wordpress && cd wordpress
    
    # mkdir files tasks templates
    
    # cd files/
    
    # vim health_check.sh
    
    #!/bin/bash
    URL=$1
    PORT=$2
    curl -Is http://$URL:$PORT/info.php > /dev/null && echo "The remote side is healthy" || echo "The remote side is failed, please check"
    
    # echo "<?php phpinfo(); ?>" > info.php
    
    # vim www.conf

; Start a new pool named 'www'.
    [www]
    
    ; Unix user/group of processes
    ; Note: The user is mandatory. If the group is not set, the default user's group ; will be used. ; RPM: apache Choosed to be able to access some dir as httpd user = deploy ; RPM: Keep a group allowed to write in log dir. group = deploy ; The address on which to accept FastCGI requests. ; Valid syntaxes are: ; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on ; a specific port; ; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on ; a specific port; ; 'port' - to listen on a TCP socket to all addresses ; (IPv6 and IPv4-mapped) on a specific port; ; '/path/to/unix/socket' - to listen on a unix socket. ; Note: This value is mandatory. ;listen = 127.0.0.1:9000 listen = /var/run/php-fpm/php-fpm.sock ; Set listen(2) backlog. ; Default Value: 511 (-1 on FreeBSD and OpenBSD) ;listen.backlog = 511 ; Set permissions for unix socket, if one is used. In Linux, read/write ; permissions must be set in order to allow connections from a web server. Many ; BSD-derived systems allow connections regardless of permissions. ; Default Values: user and group are set as the running user ; mode is set to 0660 listen.owner = deploy listen.group = deploy ;listen.mode = 0660 ; When POSIX Access Control Lists are supported you can set them using ; these options, value is a comma separated list of user/group names. ; When set, listen.owner and listen.group are ignored ;listen.acl_users = ;listen.acl_groups = ; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect. ; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original ; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address ; must be separated by a comma. If this value is left blank, connections will be ; accepted from any ip address. ; Default Value: any listen.allowed_clients = 127.0.0.1 ; Specify the nice(2) priority to apply to the pool processes (only if set) ; The value can vary from -19 (highest priority) to 20 (lower priority) ; Note: - It will only work if the FPM master process is launched as root ; - The pool processes will inherit the master process priority ; unless it specified otherwise ; Default Value: no set ; process.priority = -19 ; Choose how the process manager will control the number of child processes. ; Possible Values: ; static - a fixed number (pm.max_children) of child processes; ; dynamic - the number of child processes are set dynamically based on the ; following directives. With this process management, there will be ; always at least 1 children. ; pm.max_children - the maximum number of children that can ; be alive at the same time. ; pm.start_servers - the number of children created on startup. ; pm.min_spare_servers - the minimum number of children in 'idle' ; state (waiting to process). If the number ; of 'idle' processes is less than this ; number then some children will be created. ; pm.max_spare_servers - the maximum number of children in 'idle' ; state (waiting to process). If the number ; of 'idle' processes is greater than this ; number then some children will be killed. ; ondemand - no children are created at startup. Children will be forked when ; new requests will connect. The following parameter are used: ; pm.max_children - the maximum number of children that ; can be alive at the same time. ; pm.process_idle_timeout - The number of seconds after which ; an idle process will be killed. ; Note: This value is mandatory. pm = dynamic ; The number of child processes to be created when pm is set to 'static' and the ; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. ; This value sets the limit on the number of simultaneous requests that will be ; served. Equivalent to the ApacheMaxClients directive with mpm_prefork. ; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP ; CGI. ; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' ; Note: This value is mandatory. pm.max_children = 50 ; The number of child processes created on startup. ; Note: Used only when pm is set to 'dynamic' ; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2 pm.start_servers = 5 ; The desired minimum number of idle server processes. ; Note: Used only when pm is set to 'dynamic' ; Note: Mandatory when pm is set to 'dynamic' pm.min_spare_servers = 5 ; The desired maximum number of idle server processes. ; Note: Used only when pm is set to 'dynamic' ; Note: Mandatory when pm is set to 'dynamic' pm.max_spare_servers = 35 ; The number of seconds after which an idle process will be killed. ; Note: Used only when pm is set to 'ondemand' ; Default Value: 10s ;pm.process_idle_timeout = 10s; ; The number of requests each child process should execute before respawning. ; This can be useful to work around memory leaks in 3rd party libraries. For ; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. ; Default Value: 0 ;pm.max_requests = 500 ; The URI to view the FPM status page. If this value is not set, no URI will be ; recognized as a status page. It shows the following informations: ; pool - the name of the pool; ; process manager - static, dynamic or ondemand; ; start time - the date and time FPM has started; ; start since - number of seconds since FPM has started; ; accepted conn - the number of request accepted by the pool; ; listen queue - the number of request in the queue of pending ; connections (see backlog in listen(2)); ; max listen queue - the maximum number of requests in the queue ; of pending connections since FPM has started; ; listen queue len - the size of the socket queue of pending connections; ; idle processes - the number of idle processes; ; active processes - the number of active processes; ; total processes - the number of idle + active processes; ; max active processes - the maximum number of active processes since FPM ; has started; ; max children reached - number of times, the process limit has been reached, ; when pm tries to start more children (works only for ; pm 'dynamic' and 'ondemand'); ; Value are updated in real time. ; Example output: ; pool: www ; process manager: static ; start time: 01/Jul/2011:17:53:49 +0200 ; start since: 62636 ; accepted conn: 190460 ; listen queue: 0 ; max listen queue: 1 ; listen queue len: 42 ; idle processes: 4 ; active processes: 11 ; total processes: 15 ; max active processes: 12 ; max children reached: 0 ; ; By default the status page output is formatted as text/plain. Passing either ; 'html', 'xml' or 'json' in the query string will return the corresponding ; output syntax. Example: ; http://www.foo.bar/status ; http://www.foo.bar/status?json ; http://www.foo.bar/status?html ; http://www.foo.bar/status?xml ; ; By default the status page only outputs short status. Passing 'full' in the ; query string will also return status for each pool process. ; Example: ; http://www.foo.bar/status?full ; http://www.foo.bar/status?json&full ; http://www.foo.bar/status?html&full ; http://www.foo.bar/status?xml&full ; The Full status returns for each process: ; pid - the PID of the process; ; state - the state of the process (Idle, Running, ...); ; start time - the date and time the process has started; ; start since - the number of seconds since the process has started; ; requests - the number of requests the process has served; ; request duration - the duration in µs of the requests; ; request method - the request method (GET, POST, ...); ; request URI - the request URI with the query string; ; content length - the content length of the request (only with POST); ; user - the user (PHP_AUTH_USER) (or '-' if not set); ; script - the main script called (or '-' if not set); ; last request cpu - the %cpu the last request consumed ; it's always 0 if the process is not in Idle state
    ;                          because CPU calculation is done when the request
    ;                          processing has terminated;
    ;   last request memory  - the max amount of memory the last request consumed
    ;                          it's always 0 if the process is not in Idle state ; because memory calculation is done when the request ; processing has terminated; ; If the process is in Idle state, then informations are related to the ; last request the process has served. Otherwise informations are related to ; the current request being served. ; Example output: ; ************************ ; pid: 31330 ; state: Running ; start time: 01/Jul/2011:17:53:49 +0200 ; start since: 63087 ; requests: 12808 ; request duration: 1250261 ; request method: GET ; request URI: /test_mem.php?N=10000 ; content length: 0 ; user: - ; script: /home/fat/web/docs/php/test_mem.php ; last request cpu: 0.00 ; last request memory: 0 ; ; Note: There is a real-time FPM status monitoring sample web page available ; It's available in: @EXPANDED_DATADIR@/fpm/status.html
    ;
    ; Note: The value must start with a leading slash (/). The value can be
    ;       anything, but it may not be a good idea to use the .php extension or it
    ;       may conflict with a real PHP file.
    ; Default Value: not set
    ;pm.status_path = /status
    
    ; The ping URI to call the monitoring page of FPM. If this value is not set, no
    ; URI will be recognized as a ping page. This could be used to test from outside
    ; that FPM is alive and responding, or to
    ; - create a graph of FPM availability (rrd or such);
    ; - remove a server from a group if it is not responding (load balancing);
    ; - trigger alerts for the operating team (24/7).
    ; Note: The value must start with a leading slash (/). The value can be
    ;       anything, but it may not be a good idea to use the .php extension or it
    ;       may conflict with a real PHP file.
    ; Default Value: not set
    ;ping.path = /ping
    
    ; This directive may be used to customize the response of a ping request. The
    ; response is formatted as text/plain with a 200 response code.
    ; Default Value: pong
    ;ping.response = pong
    
    ; The access log file
    ; Default: not set
    ;access.log = log/$pool.access.log
    
    ; The access log format.
    ; The following syntax is allowed
    ;  %%: the '%' character
    ;  %C: %CPU used by the request
    ;      it can accept the following format:
    ;      - %{ user}C for user CPU only
    ;      - %{ system}C for system CPU only
    ;      - %{ total}C  for user + system CPU (default)
    ;  %d: time taken to serve the request
    ;      it can accept the following format:
    ;      - %{ seconds}d (default)
    ;      - %{ miliseconds}d
    ;      - %{ mili}d
    ;      - %{ microseconds}d
    ;      - %{ micro}d
    ;  %e: an environment variable (same as $_ENV or $_SERVER)
    ;      it must be associated with embraces to specify the name of the env
    ;      variable. Some exemples:
    ;      - server specifics like: %{ REQUEST_METHOD}e or %{ SERVER_PROTOCOL}e
    ;      - HTTP headers like: %{ HTTP_HOST}e or %{ HTTP_USER_AGENT}e
    ;  %f: script filename
    ;  %l: content-length of the request (for POST request only)
    ;  %m: request method
    ;  %M: peak of memory allocated by PHP
    ;      it can accept the following format:
    ;      - %{ bytes}M (default)
    ;      - %{ kilobytes}M
    ;      - %{ kilo}M
    ;      - %{ megabytes}M
    ;      - %{ mega}M
    ;  %n: pool name
    ;  %o: output header
    ;      it must be associated with embraces to specify the name of the header:
    ;      - %{ Content-Type}o
    ;      - %{ X-Powered-By}o
    ;      - %{ Transfert-Encoding}o
    ;      - ....
    ;  %p: PID of the child that serviced the request
    ;  %P: PID of the parent of the child that serviced the request
    ;  %q: the query string
    ;  %Q: the '?' character if query string exists
    ;  %r: the request URI (without the query string, see %q and %Q)
    ;  %R: remote IP address
    ;  %s: status (response code)
    ;  %t: server time the request was received
    ;      it can accept a strftime(3) format:
    ;      %d/%b/%Y:%H:%M:%S %z (default)
    ;      The strftime(3) format must be encapsuled in a %{ <strftime_format>}t tag
    ;      e.g. for a ISO8601 formatted timestring, use: %{ %Y-%m-%dT%H:%M:%S%z}t
    ;  %T: time the log has been written (the request has finished)
    ;      it can accept a strftime(3) format:
    ;      %d/%b/%Y:%H:%M:%S %z (default)
    ;      The strftime(3) format must be encapsuled in a %{ <strftime_format>}t tag
    ;      e.g. for a ISO8601 formatted timestring, use: %{ %Y-%m-%dT%H:%M:%S%z}t
    ;  %u: remote user
    ;
    ; Default: "%R - %u %t \"%m %r\" %s"
    ;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%"
    
    ; The log file for slow requests
    ; Default Value: not set
    ; Note: slowlog is mandatory if request_slowlog_timeout is set
    slowlog = /var/log/php-fpm/www-slow.log
    
    ; The timeout for serving a single request after which a PHP backtrace will be
    ; dumped to the 'slowlog' file. A value of '0s' means 'off'.
    ; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
    ; Default Value: 0
    ;request_slowlog_timeout = 0
    
    ; The timeout for serving a single request after which the worker process will
    ; be killed. This option should be used when the 'max_execution_time' ini option
    ; does not stop script execution for some reason. A value of '0' means 'off'.
    ; Available units: s(econds)(default), m(inutes), h(ours), or d(ays)
    ; Default Value: 0
    ;request_terminate_timeout = 0
    
    ; Set open file descriptor rlimit.
    ; Default Value: system defined value
    ;rlimit_files = 1024
    
    ; Set max core size rlimit.
    ; Possible Values: 'unlimited' or an integer greater or equal to 0
    ; Default Value: system defined value
    ;rlimit_core = 0
    
    ; Chroot to this directory at the start. This value must be defined as an
    ; absolute path. When this value is not set, chroot is not used.
    ; Note: chrooting is a great security feature and should be used whenever
    ;       possible. However, all PHP paths will be relative to the chroot
    ;       (error_log, sessions.save_path, ...).
    ; Default Value: not set
    ;chroot =
    
    ; Chdir to this directory at the start.
    ; Note: relative path can be used.
    ; Default Value: current directory or / when chroot
    ;chdir = /var/www
    
    ; Redirect worker stdout and stderr into main error log. If not set, stdout and
    ; stderr will be redirected to /dev/null according to FastCGI specs.
    ; Note: on highloaded environement, this can cause some delay in the page
    ; process time (several ms).
    ; Default Value: no
    ;catch_workers_output = yes
    
    ; Clear environment in FPM workers
    ; Prevents arbitrary environment variables from reaching FPM worker processes
    ; by clearing the environment in workers before env vars specified in this
    ; pool configuration are added.
    ; Setting to "no" will make all environment variables available to PHP code
    ; via getenv(), $_ENV and $_SERVER.
    ; Default Value: yes
    ;clear_env = no
    
    ; Limits the extensions of the main script FPM will allow to parse. This can
    ; prevent configuration mistakes on the web server side. You should only limit
    ; FPM to .php extensions to prevent malicious users to use other extensions to
    ; exectute php code.
    ; Note: set an empty value to allow all extensions.
    ; Default Value: .php
    ;security.limit_extensions = .php .php3 .php4 .php5 .php7
    
    ; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from
    ; the current environment.
    ; Default Value: clean env
    ;env[HOSTNAME] = $HOSTNAME
    ;env[PATH] = /usr/local/bin:/usr/bin:/bin
    ;env[TMP] = /tmp
    ;env[TMPDIR] = /tmp
    ;env[TEMP] = /tmp
    
    ; Additional php.ini defines, specific to this pool of workers. These settings
    ; overwrite the values previously defined in the php.ini. The directives are the
    ; same as the PHP SAPI:
    ;   php_value/php_flag             - you can set classic ini defines which can
    ;                                    be overwritten from PHP call 'ini_set'.
    ;   php_admin_value/php_admin_flag - these directives won't be overwritten by ; PHP call 'ini_set' ; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no. ; Defining 'extension' will load the corresponding shared extension from ; extension_dir. Defining 'disable_functions' or 'disable_classes' will not
    ; overwrite previously defined php.ini values, but will append the new value
    ; instead.
    
    ; Default Value: nothing is defined by default except the values in php.ini and
    ;                specified at startup with the -d argument
    ;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com
    ;php_flag[display_errors] = off
    php_admin_value[error_log] = /var/log/php-fpm/www-error.log
    php_admin_flag[log_errors] = on
    ;php_admin_value[memory_limit] = 128M
    
    ; Set session path to a directory owned by process user
    php_value[session.save_handler] = files
    php_value[session.save_path]    = /var/lib/php/session
    php_value[soap.wsdl_cache_dir]  = /var/lib/php/wsdlcache

templates

# cd .. && cd templates
    
    # vim nginx.conf.j2
    
    user { {  user }};
    worker_processes  { {  worker_processes }};
    error_log /var/log/nginx/error.log;
    pid /var/run/nginx.pid;
    worker_rlimit_nofile 65535;
    
    events { 
        use epoll;
        worker_connections { {  max_open_file }};
        multi_accept on;
    }
    
    http { 
        include       mime.types;
        default_type  application/octet-stream;
    
        log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';
    
        access_log  /var/log/nginx/access.log  main;
    
        server_tokens       off;
        sendfile            on;
        send_timeout        3m;
        tcp_nopush          on;
        tcp_nodelay         on;
        keepalive_timeout   65;
        types_hash_max_size 2048;
    
        #gzip on;
    
        server {   
            listen { {  port }} default_server;        
            server_name { {  server_name }};   
            root { {  root }};
      
            location / {   
                index  index.html index.htm index.php;  
            }  
    
            location ~ \.php$ { 
                try_files $uri =404;
                fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
                fastcgi_index index.php;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                include fastcgi_params;
            }
        }
    }

tasks

# cd .. && cd tasks
    
    # vim main.yml
    
    - name: Update yum dependency
      shell: "yum update -y warn=False"
    
    - name: Disable system firewalld
      service: name=firewalld state=stopped enabled=no
    
    - name: Disable SELINUX
      selinux: state=disabled
    
    - name: Setup epel yum source for nginx and mariadb(mysql)
      yum: name=epel-release state=latest
    
    - name: Setup webtatic yum source for php-fpm
      yum: name=https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
    
    - name: Yum install nginx
      yum: name=nginx state=latest
      
    - name: Write then nginx config file
      template: src=roles/wordpress/templates/nginx.conf.j2 dest=/etc/nginx/nginx.conf
    
    - name: Create nginx root folder
      file: "name={ { root }} state=directory owner={ { user }} group={ { user }} mode=0755 recurse=yes"
    
    - name: Copy info.php to remote
      copy: "remote_src=no src=roles/wordpress/files/info.php dest={ { root }}/info.php mode=0755"
    
    - name: Start nginx service
      service: name=nginx state=started enabled=yes
    
    - name: Setup php-fpm
      command: "yum install -y php72w php72w-fpm php72w-common php72w-mysql php72w-gd php72w-xml php72w-mbstring php72w-mcrypt warn=False"
    
    - name: Start php-fpm service
      service: name=php-fpm state=started enabled=yes
      
    - name: Copy www.conf to remote
      copy: "remote_src=no src=roles/wordpress/files/www.conf dest=/etc/php-fpm.d/www.conf mode=0755 owner={ { user }} group={ { user }} mode=0755 force=yes"
    
    - name: Restart php-fpm service
      service: name=php-fpm state=restarted
      
    - name: Copy health_check.sh to remote 
      copy: "remote_src=no src=roles/wordpress/files/health_check.sh dest=/tmp/health_check.sh mode=0755 force=yes"
    
    - name: Run the health_check.sh 
      shell: "sh /tmp/health_check.sh { { server_name }} { { port }}"
      register: health_status
    
    - debug: msg="{ { health_status.stdout }}"
    
    - name: Setup mariadb(mysql)
      command: "yum install -y mariadb mariadb-server warn=False"
      
    - name: Backup current www folder
      shell: "mv { { root }} { { backup_to }}"
      
    - name: Close git ssl verifycation
      shell: "git config --global http.sslVerify false"
      
    - name: Clone Wordpress repo to remote
      git: "repo=https://{ { gitlab_user | urlencode }}:{ { gitlab_pass | urlencode }}@gitlab.lzxlinux.com/root/Wordpress-project.git dest={ { root }} version={ { branch }}"
      when: project == 'wordpress'
      
    - name: Change www folder permission
      file: "name={ { root }} state=directory owner={ { user }} group={ { user }} mode=0755 recurse=yes"
      
    - name: Restart nginx service
      service: name=nginx state=restarted

*  将ansible-playbook提交到gitlab：

# cd /home/repo/ansible-playbook-repo/wordpress_playbooks/
    
    # tree .
    .
    ├── deploy.yml
    ├── inventory
    │   ├── dev
    │   └── prod
    └── roles
        └── wordpress
            ├── files
            │   ├── health_check.sh
            │   ├── info.php
            │   └── www.conf
            ├── tasks
            │   └── main.yml
            └── templates
                └── nginx.conf.j2
    
    6 directories, 8 files

# git add .
    
    # git commit -m "First commit"
    
    [master dfeb3df] First commit
     8 files changed, 550 insertions(+)
     create mode 100644 wordpress_playbooks/deploy.yml
     create mode 100644 wordpress_playbooks/inventory/dev
     create mode 100644 wordpress_playbooks/inventory/prod
     create mode 100644 wordpress_playbooks/roles/wordpress/files/health_check.sh
     create mode 100644 wordpress_playbooks/roles/wordpress/files/info.php
     create mode 100644 wordpress_playbooks/roles/wordpress/files/www.conf
     create mode 100644 wordpress_playbooks/roles/wordpress/tasks/main.yml
     create mode 100644 wordpress_playbooks/roles/wordpress/templates/nginx.conf.j2
    
    # git push origin master
    
    Username for 'https://gitlab.lzxlinux.com': root
    Password for 'https://root@gitlab.lzxlinux.com': 
    Counting objects: 18, done.
    Delta compression using up to 2 threads.
    Compressing objects: 100% (13/13), done.
    Writing objects: 100% (17/17), 8.27 KiB | 0 bytes/s, done.
    Total 17 (delta 1), reused 0 (delta 0)
    To https://gitlab.lzxlinux.com/root/ansible-playbook-repo.git
       fc8b669..dfeb3df  master -> master

刷新gitlab后台，查看ansible-playbook-repo项目

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 8]

*  gitlab创建`Wordpress-project`项目：

点击右上方`+` → `New porject`，`Project name`输入Wordpress-project，`Visibility Level`选择默认的`Private`即可，最后点击`Create project`创建项目。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 9]

*  下载workpress源码，提交到gitlab：

# cd /home/repo/
    
    # git clone https://gitlab.lzxlinux.com/root/Wordpress-project.git
    
    # cd /software
    
    # unzip wordpress-5.2.3-zh_CN.zip
    
    # mv wordpress/* /home/repo/Wordpress-project/
    
    # git add .
    
    # git commit -m "First commit"
    
    # git push origin master
    
    Username for 'https://gitlab.lzxlinux.com': root
    Password for 'https://root@gitlab.lzxlinux.com': 
    Counting objects: 2046, done.
    Delta compression using up to 2 threads.
    Compressing objects: 100% (2011/2011), done.
    Writing objects: 100% (2046/2046), 11.52 MiB | 2.79 MiB/s, done.
    Total 2046 (delta 205), reused 0 (delta 0)
    remote: Resolving deltas: 100% (205/205), done.
    To https://gitlab.lzxlinux.com/root/Wordpress-project.git
     * [new branch]      master -> master

刷新gitlab后台，查看Wordpress-project项目

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 10]

*  pipeline job构建与自动化部署：

点击`新建任务`，任务名称输入`wordpress-pipeline-job`，选择`流水线`。

添加描述信息：`This is my first wordpress pipeline job`，

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 11]

接着定义`Pipeline script`，写入下面内容

#!groovy
    
    pipeline { 
        agent { node { label 'master'}}
        
        environment { 
            PATH="/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin"
        }
        
        parameters { 
            choice (
                choices: 'dev\nprod',
                description: 'choose deploy environment',
                name: 'deploy_env'
            )
            string (
                name: 'branch', 
                defaultValue: 'master', 
                description: 'build branch'
            )
        }
        
        stages { 
            stage("Pull deploy code") { 
                steps { 
                    sh 'git config --global http.sslVertify false'
                    dir ("${env.WORKSPACE}") { 
                        git branch: 'master', credentialsId: "00ee2c7c-c475-440c-a88f-dd6c9a49f669", url: 'https://gitlab.lzxlinux.com/root/ansible-playbook-repo.git'
                    }
                }
            }
            stage("Check env") { 
                steps { 
                    dir ("${env.WORKSPACE}") { 
                        sh """ set +x user=`whoami` if [ $user == deploy ] then echo "Current deployment environment is $deploy_env" source /home/deploy/.py3-a2.8-env/bin/activate source /home/deploy/.py3-a2.8-env/ansible/hacking/env-setup -q echo "[INFO] Current python version" python --version echo "[INFO] Current ansible version" ansible-playbook --version echo "[INFO] Remote system disk space" ssh root@test.lzxlinux.com df -h echo "[INFO] Remote system RAM" ssh root@test.lzxlinux.com free -m else echo "Deployment user is incorrect, please check" fi set -x """
                    }
                }
            }
            stage("Ansible deployment") { 
                steps { 
                    input "Do you approve the deployment?"
                    dir ("${env.WORKSPACE}/wordpress_playbooks") { 
                        echo "[INFO] Start deployment"
                        sh """ set +x source /home/deploy/.py3-a2.8-env/bin/activate source /home/deploy/.py3-a2.8-env/ansible/hacking/env-setup -q ansible-playbook -i inventory/$deploy_env ./deploy.yml -e project=wordpress -e branch=$branch -e env=$deploy_env set -x """
                        echo "[INFO] Deployment finished..."
                    }
                }
            }
        }
    }

上面的credentialsId即`00ee2c7c-c475-440c-a88f-dd6c9a49f669`，是复制凭据页面创建该凭据（gitlab管理员全局凭据）时自动生成的凭据id。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 12]

点击`应用`，再点击`保存`。接着点击`立即构建`，等待构建完成，会发现构建失败，原因是第一次构建时`选项参数`没有引入到当前的pipeline job中。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 13]

点击`wordpress-pipeline-job`回到该项目中，会发现`立即构建`变成了`Build with Parameters`，选择对应的`选项参数`，选择好后点击`开始构建`。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 14]

等待构建完成，查看控制台输出

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 15]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 16]

*  创建数据库wordpress：

# systemctl start mariadb.service
    
    # mysql_secure_installation 
    
    Enter current password for root (enter for none):               #直接回车
    Set root password? [Y/n] y              #设置root密码，我这里是123456
    New password: 
    Re-enter new password: 
    Remove anonymous users? [Y/n] y             #删除匿名用户
    Disallow root login remotely? [Y/n] y               #不允许root用户远程登录
    Remove test database and access to it? [Y/n] y              #删除test database及其访问
    Reload privilege tables now? [Y/n] y                #重载所有权限

# mysql -uroot -p123456
    
    MariaDB [(none)]> create database wordpress character set utf8;

打开浏览器，访问`test.lzxliux.com:8080`（如果`deploy_env`选择的是`prod`，则访问`test.lzxliux.com`）。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 17]

点击`现在就开始`，填入数据库root用户及其密码，点击`提交`。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 18]

接着填入站点标题、管理员用户及其密码等信息，点击`安装WordPress`。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 19]

接着使用上面定义的管理员用户及其密码登录wordpress后台管理界面。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 20]

使用pipeline job自动化部署wordpress的过程到此成功结束。

--------------------

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70]: /images/20230601/93a5b849de6c4b7bbb13cbc0eb12f184.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 1]: /images/20230601/e52901dce6b64cceb1100dceeba1012f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 2]: /images/20230601/398b0854edc4414cb64c7ffabbe3ac93.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 3]: /images/20230601/7e54638724f14d90aea504899c97bd84.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 4]: /images/20230601/7604e76142d04ab385a7f35a9ba5ab6f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 5]: /images/20230601/c33d55f7081d465783a6ba51ff6497f3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 6]: /images/20230601/b1c458093ac04e36a1f247cb9a4cf6d8.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 7]: /images/20230601/8c7322a4e5d4435b825b694410b7d71e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 8]: /images/20230601/3dbc448b3da0468abcd3e973d4db5e18.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 9]: /images/20230601/142f7c981acf418d89cf4009f0b728d9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 10]: /images/20230601/cd0c25d81bb142c7b80a1999b30df34d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 11]: /images/20230601/1a0e6a1127d0435eaea6a473634ad5d5.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 12]: /images/20230601/caeac5e9b3064a78b13035f06d9a8e4b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 13]: /images/20230601/9776f2a05bef4c7ebecd83c433b1eaee.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 14]: /images/20230601/ac753130210b401981dd23fd6508a903.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 15]: /images/20230601/b7f74d2e49eb4fde969357382047223f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 16]: /images/20230601/7fa53111f3994ed6a51c5e67f7255a7c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 17]: /images/20230601/567405d0b9334df9b8607129f3d7ac3c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 18]: /images/20230601/cfcb9133d0bb4e73b3f169c4d41252e0.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 19]: /images/20230601/c7fe6fb2d63b4678a08869e163eb8b9e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L21pc3MxMTgxMjQ4OTgz_size_16_color_FFFFFF_t_70 20]: /images/20230601/2344398bd8ad4c7b9e1a0ed0f3204c58.png