Difference between revisions of "Sonar"
(→‎Add plugins)
 
(16 intermediate revisions by the same user not shown)
Line 2: Line 2:
 
[[Category:Linux]]
 
[[Category:Linux]]
  
−
The following instructions are for Ubuntu 14.04 LTS.
 
  
 +
This page describes '''how to setup SonarQube''':
 +
* Application installation
 +
* Post-install settings
  
−
You can find all these instructions and more on the Official how-to: http://sonar-pkg.sourceforge.net/
 
  
 +
History:
 +
* 2016-12-25 : update for Ubuntu 16.10
 +
* 2019-03-26 : update for SonarQube 7.x on CentOs 7.x ; with PostgreSQL server
  
−
=Requirements=
 
  
−
You need to have a MySQL server available.
+
You can find all these instructions and more on the [https://docs.sonarqube.org/latest/setup/install-server/ Official how-to]
  
  
  
−
=Installation (Ubuntu)=
 
  
  
 +
=Requirement: PostgreSQL DB server=
  
−
==Get package==
+
You need a DB server to use SonarQube. The default H2 engine is (very) slow. The SonarQube team recommends PostgreSQL-
 +
 
 +
 
 +
==Setup PostgreSQL==
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
vim /etc/apt/sources.list
+
# Add repository
 +
sudo wget https://download.postgresql.org/pub/repos/yum/11/redhat/rhel-7-x86_64/pgdg-centos11-11-2.noarch.rpm -P /tmp
 +
sudo yum install /tmp/pgdg-centos11-11-2.noarch.rpm epel-release
 +
sudo yum update
 +
 
 +
# Setup server
 +
sudo yum install postgresql11-server postgresql11-contrib postgresql11
 +
 
 +
# Init Postgres database
 +
#  > default user: postgres
 +
sudo /usr/pgsql-11/bin/postgresql-11-setup initdb
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Add a new repository
+
==Active remote access==
 +
 
 +
Adjust configuration to enable remote access
 +
 
 +
 
 +
'''Postgresql.conf'''
 +
<syntaxhighlight lang="bash">
 +
sudo cp /var/lib/pgsql/11/data/postgresql.conf /var/lib/pgsql/11/data/postgresql.conf.backup
 +
sudo vim /var/lib/pgsql/11/data/postgresql.conf
 +
</syntaxhighlight>
 +
 
  
 +
Set:   
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
deb http://downloads.sourceforge.net/project/sonar-pkg/deb binary/
+
listen_addresses = '*'
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Update packages list and install sonar
+
'''PG_HBA'''
 +
<syntaxhighlight lang="bash">
 +
sudo cp /var/lib/pgsql/11/data/pg_hba.conf /var/lib/pgsql/11/data/pg_hba.conf.backup
 +
sudo vim /var/lib/pgsql/11/data/pg_hba.conf
 +
</syntaxhighlight>
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
apt-get update
+
# IPv4 local connections:
−
apt-get install sonar
+
host    all            all            0.0.0.0/0              md5
 +
# IPv6  local connections:
 +
host    all            all            ::/0                    md5
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
==Create SONAR database==
+
==start PSQL==
 +
 
 +
<syntaxhighlight lang="bash">
 +
# Start Postgres server
 +
sudo systemctl enable postgresql-11.service
 +
sudo systemctl start postgresql-11.service
 +
 
  
−
SONAR needs to work with a database.
+
# Set 'postgres' LINUX user password (recommandation: postgres)
 +
sudo passwd postgres
  
−
You can create a new MySQL database + MySQL user for it.
+
# ... Set 'postgres' SQL DB ADMIN user password (recommandation: postgres)
 +
# Prepare home folder
 +
sudo mkdir -p /home/postgres
 +
sudo chmod -R 777 /home/postgres
 +
sudo chown -R postgres:users /home/postgres
 +
localFolder=`pwd`
 +
# Change password
 +
cd /home/postgres
 +
sudo -u postgres bash -c "psql -d template1 -c \"ALTER USER postgres WITH PASSWORD 'newPassword';\""
 +
cd $localFolder
  
 +
# Start Postgres on boot
 +
sudo systemctl enable postgresql
 +
</syntaxhighlight>
 +
 +
 +
==Centos firewall==
 +
 +
For Debian IPTABLES just open the port TCP 5234
  
−
Step 1: Login to MySQL as ROOT
 
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
mysql -u root -p
+
POSTGRES_DEFAULT_PORT=5234
−
Enter password:
+
 
 +
# Remove previous FW rules, if any
 +
sudo firewall-cmd --permanent --disable-port=$POSTGRES_DEFAULT_PORT/tcp
 +
sudo firewall-cmd --permanent --remove-port=$POSTGRES_DEFAULT_PORT/tcp
 +
sudo firewall-cmd --permanent --remove-service=postgres --zone=trusted
 +
sudo firewall-cmd --permanent --remove-service=postgres
 +
 
 +
# Add new FW rules
 +
sudo firewall-cmd --permanent --new-service=postgres
 +
sudo firewall-cmd --permanent --service=postgres --set-short="Postgresql database server"
 +
sudo firewall-cmd --permanent --service=postgres --set-description="Postgres database server"
 +
sudo firewall-cmd --permanent --service=postgres --add-port=$POSTGRES_DEFAULT_PORT/tcp
 +
sudo firewall-cmd --permanent --add-service=postgres --zone=trusted
 +
 
 +
# Reload FW rules
 +
sudo firewall-cmd --reload
 +
sudo firewall-cmd --list-all
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Step 2: Create the Database
+
Some helpful Source: [https://www.linode.com/docs/databases/postgresql/how-to-install-postgresql-relational-databases-on-centos-7/ Linode tutorial]
 +
 
 +
 
 +
 
 +
 
 +
 
 +
=Setup SONARQUBE application=
 +
 
 +
 
 +
==Requirement: create user / group==
 +
 
 +
You cannot run SONAR as "root". It must run as a user
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
mysql > create database sonar;
+
sudo adduser sonar
 +
sudo groupadd sonar
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Step 3: Verify that it’s there
+
==Get SonarQube==
 +
 
 +
'''As a sudoer user''', download the latest version (or the LTS) on http://www.sonarqube.org/downloads/
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
mysql > show databases;
+
cd /opt
 +
 
 +
# SonarQube
 +
# 2019-05: current version is 7.7
 +
wget  https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-7.7.zip
 +
unzip sonarqube-7.7.zip
 +
ln -s /opt/sonarqube-7.7 /opt/sonarqube
 +
 
 +
# Adjust rights
 +
chown -R sonar:sonar /opt/sonarqube-7.7
 +
chown -R sonar:sonar /opt/sonarqube
 
</syntaxhighlight>
 
</syntaxhighlight>
  
 +
(i) It's always good to use a symlink. This make the update and rollback a bit easier.
 +
 +
 +
==Configuration (sonar.properties)==
  
−
Step 4: Create the User
+
Edit the SonarQube configuration file
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
mysql > create user sonar;
+
vim /opt/sonarqube/conf/sonar.properties
 +
</syntaxhighlight>
 +
 
 +
 
 +
===Database===
 +
 
 +
Disable embedded H2DB and enable PSQL, lines 20 to 40:
 +
 
 +
<syntaxhighlight lang="apache">
 +
sonar.jdbc.username=sonarqube            
 +
sonar.jdbc.password=sonarqube
 +
# postgreSQL
 +
sonar.jdbc.url=jdbc:postgresql://localhost/sonarqube
 +
</syntaxhighlight>
 +
 
 +
 
 +
===Port number and root context===
 +
 
 +
Adjust port number and context
 +
 
 +
<syntaxhighlight lang="apache">
 +
#sonar.web.host:            0.0.0.0
 +
#sonar.web.port:            9000
 +
sonar.web.context:          /sonarqube
 
</syntaxhighlight>
 
</syntaxhighlight>
  
 +
!!! This is VERY important that you uncomment and set the '''sonar.web.context''' !!! Without it you cannot use Apache2 proxy.
 +
 +
 +
===Sonar symlink===
  
−
Step 5: Grant privileges while assigning the password
+
The default path to manage SonarQube is, in that example: <code>/opt/sonarqube/bin/linux-x86-64/sonar.sh</code>
 +
idem for the logs...
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
mysql > grant all on sonar.* to 'sonar'@'localhost' identified by 'sonar';
+
ln -s /opt/sonarqube/bin/linux-x86-64/sonar.sh /usr/bin/sonarqube
 +
ln -s /opt/sonarqube/bin/linux-x86-64/sonar.sh /etc/init.d/sonarqube
 +
 
 +
mkdir -p /var/log/sonar
 +
ln -s /opt/sonarqube/logs/sonar.log /var/log/sonar/sonar.log
 +
ln -s /opt/sonarqube/logs/access.log /var/log/sonar/access.log
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Step 6: Apply changes
+
===Configuration (wrapper.properties)===
 +
 
 +
There is a new configuration file to edit since 5.x. Edit the WRAPPER configuration file
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
mysql > flush privileges;
+
vim /opt/sonarqube/conf/wrapper.properties
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Step 7: exit
+
Adjust your JVM path, if required, on the first line. This should point to a JDK.
 +
 
 +
<code>wrapper.java.command=/usr/lib/jvm/java-8-oracle/bin/java</code>
 +
 
 +
 
 +
==Start SonarQube==
 +
 
 +
'''As "sonar" user''' you can start SonarQube.
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
mysql > quit;
+
sudo su sonar
 +
sonarqube restart
 
</syntaxhighlight>
 
</syntaxhighlight>
  
 +
... wait for some times on 1st start (5 to 7 mn) !! Logs are in
  
  
−
==Configure SONAR==
+
Check that Sonar is up:
−
 
+
<syntaxhighlight lang="bash">
−
Edit SONAR configuration file
+
netstat -pl --numeric | grep 9000
 +
</syntaxhighlight>
  
 +
You should have:
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
vim /opt/sonar/conf/sonar.properties
+
tcp        0      0 0.0.0.0:9000            0.0.0.0:*              LISTEN      xxxxx/java
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Adjust port number and context
+
==Bug fix==
 +
If the port 9000 is already used by PHP you must remove PHP7 FPM
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
#sonar.web.host:            0.0.0.0                            line 21
+
sudo apt-get remove php7.0-fpm
−
#sonar.web.port:            9000
 
−
sonar.web.context:          /sonar
 
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Disable embedded H2DB and enable MySQL database
+
==Access SonarQube==
 +
 
 +
http://myserver:9000/sonarqube
 +
 
 +
 
 +
 
 +
==Startup script==
 +
 
 +
(i) See official documentation at:
 +
 
 +
'''As a sudoer user''', create a new startup script in <code>/etc/systemd/system</code>
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
sonar.jdbc.username:        sonar              line 41
+
vim /etc/systemd/system/sonarqube.service
−
sonar.jdbc.password:        sonar
 
−
# sonar.jdbc.url:            jdbc:h2:tcp://localhost:9092/sonar              line 49
 
−
sonar.jdbc.url:
 
−
jdbc:mysql://localhost:3306/sonar?useUnicode=true&characterEncoding=utf8&rewriteBatchedStatements=true
 
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
−
Restart Sonar
+
Put the following content:
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
/etc/init.d/sonar start
+
[Unit]
−
</syntaxhighlight">
+
Description=SonarQube service
 +
After=syslog.target network.target
  
−
... wait for some times on 1st start (5 to 7 mn) !!
+
[Service]
 +
Type=simple
 +
User=sonar
 +
Group=sonar
 +
PermissionsStartOnly=true
 +
ExecStart=/opt/sonarqube/bin/linux-x86-64/sonar.sh start
 +
ExecStop=/opt/sonarqube/bin/linux-x86-64/sonar.sh stop
 +
StandardOutput=syslog
 +
LimitNOFILE=65536
 +
LimitNPROC=8192
 +
TimeoutStartSec=5
 +
Restart=always
 +
 
 +
[Install]
 +
WantedBy=multi-user.target
 +
</syntaxhighlight>
  
  
−
Check that Sonar is up
+
Register service:
  
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
netstat -pl --numeric | grep 9000
+
sudo systemctl enable sonarqube.service
 +
</syntaxhighlight>
 +
 
 +
Run service:
 +
 
 +
<syntaxhighlight lang="bash">
 +
sudo systemctl restart sonarqube.service
 
</syntaxhighlight>
 
</syntaxhighlight>
  
−
You should have:
+
 
 +
 
 +
 
 +
 
 +
 
 +
=Apache2 proxy=
 +
 
 +
Instead of opening port 9000, it's better to access Sonar through Apache2 proxy. To use the proxy rule, the target '''/sonar''' must match the root URL (see <code>$sonar/conf/sonar.properties</code>)
 +
 
 +
 
 +
==Apache2 configuration==
 +
 
 +
Edit configuration file: module or virtual host
 +
 
 
<syntaxhighlight lang="bash">
 
<syntaxhighlight lang="bash">
−
tcp        0      0 0.0.0.0:9000            0.0.0.0:*              LISTEN      xxxxx/java
+
vim /etc/apache2/mods-enabled/proxy.conf
 +
#or
 +
vim /etc/apache2/sites-enabled/mySite.conf
 
</syntaxhighlight>
 
</syntaxhighlight>
  
  
 +
Set the following:
 +
<syntaxhighlight lang="apache">
 +
# Proxy to a Java application running over Tomcat, with IP filter
 +
<Location /sonarqube >
 +
ProxyPass http://localhost:9000/sonarqube/
 +
ProxyPassReverse http://localhost:9000/sonarsonarqube/
  
−
Add apache2 proxy rule
+
        #Require all denied
−
Sonar access will be done through Apache2 server
+
        #AllowOverride none
−
To use the proxy rule, the target /sonar must match the root URL (see sonar.properties)
+
       
 +
        Require local
 +
        Require ip 192.168.1
 +
        Require host 193.12.118.196
  
−
# vim /etc/apache2/mods-enabled/proxy.conf
+
        #Require all granted
 +
        #Satisfy any
 +
</Location>
 +
</syntaxhighlight>
  
−
Add:
 
−
        # Service SONAR runs on a different port
 
−
        ProxyPass /sonar http://localhost:9000/sonar
 
−
        ProxyPassReverse /sonar http://localhost:9000/sonar
 
  
−
Test Sonar
+
==Test Sonar==
−
Navigate to http://myServer:9000/sonar  or http://myServer/sonar
+
 
 +
* Default URL: http://localhost:9000/sonarqube/  
 +
* Using Apache2 proxy: http://myServer/sonarqube
  
 
The default user and password are “admin” and “admin“.
 
The default user and password are “admin” and “admin“.
  
−
Logs
 
−
Sonar logs are in:
 
−
/opt/sonar/logs/sonar.log
 
  
−
Upgrade Sonar
+
 
 +
 
 +
=Sonar application configuration=
 +
 
 +
Default credentials are "admin" / "admin"
 +
 
 +
 
 +
==Create user accounts==
 +
 
 +
* Go to "Administration" menu > "Security" > "Users"
 +
* Create new User(s)
 +
 
 +
* Go to "Administration" menu > "Security" > "Groups"
 +
* Click on the "sonar administrators" group
 +
* Add user(s)
 +
 
 +
 
 +
==Global configuration==
 +
 
 +
Go to "Administration" menu > "configuration" > "General"
 +
 
 +
 
 +
'''DNS name'''
 +
* Set the server base URL to DNS name if possible (property: <code>sonar.core.serverBaseURL</code>)
 +
 
 +
 
 +
'''Keep analysis longer '''
 +
* Set "keep only one analysis a week after" : 12  (default is 4, property: <code>sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByWeek</code>)
 +
 
 +
 
 +
'''Email alerts'''
 +
Configure the email notifications:
 +
* Email From (<code>email.fromName</code>)
 +
* SMTP secure connection (<code>email.smtp_secure_connection.secured</code>)
 +
* SMTP host (<code>email.smtp_host.secured</code>)
 +
* SMTP password (<code>email.smtp_password.secured</code>)
 +
* SMTP port (<code>email.smtp_port.secured</code>)
 +
* SMTP username (<code>email.smtp_username.secured</code>)
 +
 
 +
 
 +
==Add plugins==
 +
 
 +
* Go to "Administration" menu > "marketplace"
 +
* Search and install:
 +
** Checkstyle
 +
** Code smells
 +
** Findbugs
 +
** PMD
 +
 
 +
/!\ You must reboot the SonarQube instance after setup
 +
 
 +
 
 +
 
 +
You can add more plugins from the [SonarQube marketplace http://www.sonarplugins.com/]. Download and install:
 +
 
 +
'''Download OWASP dependency check for SonarQube 7.6+'''
 +
* official website: https://github.com/SonarSecurityCommunity/dependency-check-sonar-plugin
 +
* Last version of the extension: https://github.com/SonarSecurityCommunity/dependency-check-sonar-plugin/releases
 +
* Download (2019-05): wget https://github.com/SonarSecurityCommunity/dependency-check-sonar-plugin/releases/download/1.1.4/sonar-dependency-check-plugin-1.1.4.jar
 +
* Copy the plugin (jar file) to $SONAR_INSTALL_DIR/extensions/plugins
 +
* Restart SonarQube
 +
 
 +
==Quality profile==
 +
 
 +
* Go to "Quality profiles" menu
 +
* Under "JAVA"
 +
* Set as default the JAVA ruleset you'd like to use
 +
 
 +
 
 +
 
 +
 
 +
=Upgrade Sonar=
 +
 
 
Sometimes when there are a lot of changes the new sonar version required some database change.  
 
Sometimes when there are a lot of changes the new sonar version required some database change.  
−
The service will not be available until you go to http://myServer/sonar/setup  
+
* The service will not be available until you go to '''http://myServer/sonarqube/setup'''
−
You have to agree to the terms and upgrade database
+
* You have to agree to the terms and upgrade database

Latest revision as of 09:06, 15 May 2019


This page describes how to setup SonarQube:

  • Application installation
  • Post-install settings


History:

  • 2016-12-25 : update for Ubuntu 16.10
  • 2019-03-26 : update for SonarQube 7.x on CentOs 7.x ; with PostgreSQL server


You can find all these instructions and more on the Official how-to



Requirement: PostgreSQL DB server

You need a DB server to use SonarQube. The default H2 engine is (very) slow. The SonarQube team recommends PostgreSQL-


Setup PostgreSQL

# Add repository
sudo wget https://download.postgresql.org/pub/repos/yum/11/redhat/rhel-7-x86_64/pgdg-centos11-11-2.noarch.rpm -P /tmp
sudo yum install /tmp/pgdg-centos11-11-2.noarch.rpm epel-release
sudo yum update

# Setup server
sudo yum install postgresql11-server postgresql11-contrib postgresql11

# Init Postgres database
#   > default user: postgres
 sudo /usr/pgsql-11/bin/postgresql-11-setup initdb


Active remote access

Adjust configuration to enable remote access


Postgresql.conf 

sudo cp /var/lib/pgsql/11/data/postgresql.conf /var/lib/pgsql/11/data/postgresql.conf.backup
sudo vim /var/lib/pgsql/11/data/postgresql.conf


Set: 

listen_addresses = '*'


PG_HBA 

sudo cp /var/lib/pgsql/11/data/pg_hba.conf /var/lib/pgsql/11/data/pg_hba.conf.backup
sudo vim /var/lib/pgsql/11/data/pg_hba.conf
# IPv4 local connections:
host    all             all             0.0.0.0/0               md5
# IPv6  local connections:
host    all             all             ::/0                    md5


start PSQL

# Start Postgres server
sudo systemctl enable postgresql-11.service
sudo systemctl start postgresql-11.service


# Set 'postgres' LINUX user password (recommandation: postgres)
sudo passwd postgres

# ... Set 'postgres' SQL DB ADMIN user password (recommandation: postgres)
# Prepare home folder
sudo mkdir -p /home/postgres
sudo chmod -R 777 /home/postgres
sudo chown -R postgres:users /home/postgres
localFolder=`pwd`
# Change password
cd /home/postgres
sudo -u postgres bash -c "psql -d template1 -c \"ALTER USER postgres WITH PASSWORD 'newPassword';\""
cd $localFolder

# Start Postgres on boot
sudo systemctl enable postgresql


Centos firewall

For Debian IPTABLES just open the port TCP 5234 


POSTGRES_DEFAULT_PORT=5234

# Remove previous FW rules, if any
sudo firewall-cmd --permanent --disable-port=$POSTGRES_DEFAULT_PORT/tcp
sudo firewall-cmd --permanent --remove-port=$POSTGRES_DEFAULT_PORT/tcp
sudo firewall-cmd --permanent --remove-service=postgres --zone=trusted
sudo firewall-cmd --permanent --remove-service=postgres

# Add new FW rules
sudo firewall-cmd --permanent --new-service=postgres
sudo firewall-cmd --permanent --service=postgres --set-short="Postgresql database server"
sudo firewall-cmd --permanent --service=postgres --set-description="Postgres database server"
sudo firewall-cmd --permanent --service=postgres --add-port=$POSTGRES_DEFAULT_PORT/tcp
sudo firewall-cmd --permanent --add-service=postgres --zone=trusted

# Reload FW rules
sudo firewall-cmd --reload
sudo firewall-cmd --list-all


Some helpful Source: Linode tutorial



Setup SONARQUBE application

Requirement: create user / group

You cannot run SONAR as "root". It must run as a user 

sudo adduser sonar
sudo groupadd sonar


Get SonarQube

As a sudoer user, download the latest version (or the LTS) on http://www.sonarqube.org/downloads/ 

cd /opt

# SonarQube
# 2019-05: current version is 7.7
wget  https://binaries.sonarsource.com/Distribution/sonarqube/sonarqube-7.7.zip
unzip sonarqube-7.7.zip
ln -s /opt/sonarqube-7.7 /opt/sonarqube

# Adjust rights
chown -R sonar:sonar /opt/sonarqube-7.7
chown -R sonar:sonar /opt/sonarqube

(i) It's always good to use a symlink. This make the update and rollback a bit easier.


Configuration (sonar.properties)

Edit the SonarQube configuration file 

vim /opt/sonarqube/conf/sonar.properties


Database

Disable embedded H2DB and enable PSQL, lines 20 to 40: 

sonar.jdbc.username=sonarqube			            
sonar.jdbc.password=sonarqube
# postgreSQL
sonar.jdbc.url=jdbc:postgresql://localhost/sonarqube


Port number and root context

Adjust port number and context 

#sonar.web.host:             0.0.0.0
#sonar.web.port:             9000
sonar.web.context:           /sonarqube

!!! This is VERY important that you uncomment and set the sonar.web.context !!! Without it you cannot use Apache2 proxy.


Sonar symlink

The default path to manage SonarQube is, in that example: /opt/sonarqube/bin/linux-x86-64/sonar.sh idem for the logs... 

ln -s /opt/sonarqube/bin/linux-x86-64/sonar.sh /usr/bin/sonarqube
ln -s /opt/sonarqube/bin/linux-x86-64/sonar.sh /etc/init.d/sonarqube

mkdir -p /var/log/sonar
ln -s /opt/sonarqube/logs/sonar.log /var/log/sonar/sonar.log
ln -s /opt/sonarqube/logs/access.log /var/log/sonar/access.log


Configuration (wrapper.properties)

There is a new configuration file to edit since 5.x. Edit the WRAPPER configuration file 

vim /opt/sonarqube/conf/wrapper.properties


Adjust your JVM path, if required, on the first line. This should point to a JDK.

wrapper.java.command=/usr/lib/jvm/java-8-oracle/bin/java


Start SonarQube

As "sonar" user you can start SonarQube. 

sudo su sonar
sonarqube restart

... wait for some times on 1st start (5 to 7 mn) !! Logs are in


Check that Sonar is up: 

netstat -pl --numeric | grep 9000

You should have: 

tcp        0      0 0.0.0.0:9000            0.0.0.0:*               LISTEN      xxxxx/java


Bug fix

If the port 9000 is already used by PHP you must remove PHP7 FPM 

sudo apt-get remove php7.0-fpm


Access SonarQube

http://myserver:9000/sonarqube


Startup script

(i) See official documentation at:

As a sudoer user, create a new startup script in /etc/systemd/system 

vim /etc/systemd/system/sonarqube.service


Put the following content: 

[Unit]
Description=SonarQube service
After=syslog.target network.target

[Service]
Type=simple
User=sonar
Group=sonar
PermissionsStartOnly=true
ExecStart=/opt/sonarqube/bin/linux-x86-64/sonar.sh start
ExecStop=/opt/sonarqube/bin/linux-x86-64/sonar.sh stop
StandardOutput=syslog
LimitNOFILE=65536
LimitNPROC=8192
TimeoutStartSec=5
Restart=always

[Install]
WantedBy=multi-user.target


Register service: 

sudo systemctl enable sonarqube.service

Run service: 

sudo systemctl restart sonarqube.service




Apache2 proxy

Instead of opening port 9000, it's better to access Sonar through Apache2 proxy. To use the proxy rule, the target /sonar must match the root URL (see $sonar/conf/sonar.properties)


Apache2 configuration

Edit configuration file: module or virtual host 

vim /etc/apache2/mods-enabled/proxy.conf
#or
vim /etc/apache2/sites-enabled/mySite.conf


Set the following: 

# Proxy to a Java application running over Tomcat, with IP filter
<Location /sonarqube >
	ProxyPass http://localhost:9000/sonarqube/
	ProxyPassReverse http://localhost:9000/sonarsonarqube/

        #Require all denied
        #AllowOverride none
        
        Require local
        Require ip 192.168.1
        Require host 193.12.118.196

        #Require all granted
        #Satisfy any
</Location>


Test Sonar

The default user and password are “admin” and “admin“.



Sonar application configuration

Default credentials are "admin" / "admin"


Create user accounts

  • Go to "Administration" menu > "Security" > "Users"
  • Create new User(s)
  • Go to "Administration" menu > "Security" > "Groups"
  • Click on the "sonar administrators" group
  • Add user(s)


Global configuration

Go to "Administration" menu > "configuration" > "General"


DNS name

  • Set the server base URL to DNS name if possible (property: sonar.core.serverBaseURL)


Keep analysis longer

  • Set "keep only one analysis a week after" : 12 (default is 4, property: sonar.dbcleaner.weeksBeforeKeepingOnlyOneSnapshotByWeek)


Email alerts Configure the email notifications:

  • Email From (email.fromName)
  • SMTP secure connection (email.smtp_secure_connection.secured)
  • SMTP host (email.smtp_host.secured)
  • SMTP password (email.smtp_password.secured)
  • SMTP port (email.smtp_port.secured)
  • SMTP username (email.smtp_username.secured)


Add plugins

  • Go to "Administration" menu > "marketplace"
  • Search and install:
    • Checkstyle
    • Code smells
    • Findbugs
    • PMD

/!\ You must reboot the SonarQube instance after setup


You can add more plugins from the [SonarQube marketplace http://www.sonarplugins.com/]. Download and install:

Download OWASP dependency check for SonarQube 7.6+

Quality profile

  • Go to "Quality profiles" menu
  • Under "JAVA"
  • Set as default the JAVA ruleset you'd like to use



Upgrade Sonar

Sometimes when there are a lot of changes the new sonar version required some database change.

Retrieved from "http://www.daxiongmao.eu/wiki/index.php?title=Sonar&oldid=2978"