🛠 How I Built a Full CI/CD Pipeline with Jenkins, Docker, SonarQube, Maven, and Trivy on AWS EC2

Recently, I completed an exciting DevOps hands-on project: setting up a CI/CD pipeline from scratch on AWS using Jenkins, Docker, SonarQube, Maven, and Trivy. This blog details the complete journey, including commands, configurations, and screenshots.

---

📌 Prerequisites

• AWS EC2 instance (Ubuntu t2.medium, 30 GB storage)

• GitHub & DockerHub account

• Internet connection 😉

• Some Linux command line knowledge

💡 Tip: Use a t2.medium instance instead of t2.micro due to memory and CPU constraints.

---

🔧 Step-by-Step Setup

---

Step 1: Launch EC2 Instance

• Type: t2.medium

• OS: Ubuntu

• Storage: 30 GB

• Region: US-EAST-1

---

Step 2: Connect & Switch to Root

ssh -i "your-key.pem" ubuntu@<public-ip>
sudo su

---

Step 3: Install Jenkins

Run the Jenkins installer:

wget https://raw.githubusercontent.com/praveen1994dec/tools_installation_scripts/main/jenkins.sh
bash jenkins.sh

---

Step 4: Update EC2 Security Group

• Allow port 8080 for Jenkins UI.

---

Step 5–8: Access Jenkins & Setup

• Jenkins UI: http://<EC2_PUBLIC_IP>:8080/

• Get admin password:

cat /var/lib/jenkins/secrets/initialAdminPassword

• Install suggested plugins

• Create first user

---

Step 9: Create a Pipeline Job

---

Step 10: Configure Pipeline Script from Git

Use this Git repo:

https://github.com/praveen1994dec/Java_app_3.0.git

---

Step 11: Install Plugins for Sonar & JFrog

Via Jenkins > Manage Jenkins > Plugins:

• Sonar Gerrit

• SonarQube Scanner

• SonarQube Generic Coverage

• Sonar Quality Gates

• Jfrog

• Artifactory

---

Step 12: Install Docker

wget https://raw.githubusercontent.com/praveen1994dec/tools_installation_scripts/main/docker.sh
bash docker.sh
docker -v

---

Step 13: Install SonarQube

wget https://raw.githubusercontent.com/praveen1994dec/tools_installation_scripts/main/sonarqube.sh
bash sonarqube.sh

Start container if needed:

docker ps -a
docker start <containerID>

• Login: admin / admin

• Create token under:
  My Account > Security > Create Token

Webhook for Jenkins:

http://<EC2_IP>:8080/sonarqube-webhook/

---

Step 14: Install Maven

wget https://raw.githubusercontent.com/praveen1994dec/tools_installation_scripts/main/Maven.sh
bash Maven.sh

---

Step 15: Install Trivy

wget https://raw.githubusercontent.com/praveen1994dec/tools_installation_scripts/main/trivy.sh
bash trivy.sh

---

Step 16: Integrate SonarQube with Jenkins

• Jenkins > Manage Jenkins > Configure System

• Under SonarQube servers:

  • Add URL and token (use Secret Text)

  • Token ID: sonarqube-api

---

Step 17: Add DockerHub Credentials

• Jenkins > Manage Jenkins > Credentials > Global

  • ID: docker

---

Step 18: Add Jenkins Shared Library

Name: my-shared-library
Default Version: main
Git Repo: https://github.com/praveen1994dec/jenkins_shared_lib.git

---

✅ Step 19: Run the Pipeline & Validate

Check:

• Jenkins build logs

• Trivy vulnerability reports

• SonarQube code quality dashboard

---

🙏 Special Thanks

Huge thanks to Praveen Singampalli for the practical and engaging DevOps session. Your instructions helped me gain hands-on experience with real-world tools and pipelines.

---

🏁 Conclusion

This project helped me understand how various DevOps tools come together in a real CI/CD workflow. Let me know if you'd like a follow-up blog on Kubernetes deployment next!

---