Setup SonarQube scanner for multiple programming languages with automated code quality analysis

#!/usr/bin/env bash
set -euo pipefail

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

# Default values
SONAR_VERSION="5.0.1.3006"
SONAR_HOST_URL="${1:-https://sonarqube.example.com}"
SONAR_TOKEN="${2:-your-sonarqube-token}"

# Usage function
usage() {
    echo -e "${BLUE}Usage: $0 [SONAR_HOST_URL] [SONAR_TOKEN]${NC}"
    echo "Example: $0 https://sonar.company.com squ_abc123..."
    exit 1
}

# Logging functions
log_info() { echo -e "${BLUE}[INFO]${NC} $1"; }
log_success() { echo -e "${GREEN}[SUCCESS]${NC} $1"; }
log_warning() { echo -e "${YELLOW}[WARNING]${NC} $1"; }
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }

# Cleanup function for rollback
cleanup() {
    local exit_code=$?
    if [ $exit_code -ne 0 ]; then
        log_error "Installation failed. Cleaning up..."
        rm -rf /opt/sonar-scanner /tmp/sonar-scanner-*.zip 2>/dev/null || true
        sed -i '/SONAR_SCANNER_HOME/d' /etc/environment 2>/dev/null || true
        sed -i '/sonar-scanner\/bin/d' /etc/environment 2>/dev/null || true
    fi
}
trap cleanup ERR

# Check if running as root or with sudo
if [[ $EUID -eq 0 ]]; then
    SUDO=""
elif command -v sudo >/dev/null 2>&1; then
    SUDO="sudo"
else
    log_error "This script requires root privileges or sudo access"
    exit 1
fi

# Detect Linux distribution
if [ -f /etc/os-release ]; then
    . /etc/os-release
    case "$ID" in
        ubuntu|debian)
            PKG_MGR="apt"
            PKG_INSTALL="apt install -y"
            PKG_UPDATE="apt update && apt upgrade -y"
            JAVA_PACKAGE="openjdk-17-jdk"
            JAVA_HOME_PATH="/usr/lib/jvm/java-17-openjdk-amd64"
            ;;
        almalinux|rocky|centos|rhel|ol)
            PKG_MGR="dnf"
            PKG_INSTALL="dnf install -y"
            PKG_UPDATE="dnf update -y"
            JAVA_PACKAGE="java-17-openjdk-devel"
            JAVA_HOME_PATH="/usr/lib/jvm/java-17-openjdk"
            ;;
        fedora)
            PKG_MGR="dnf"
            PKG_INSTALL="dnf install -y"
            PKG_UPDATE="dnf update -y"
            JAVA_PACKAGE="java-17-openjdk-devel"
            JAVA_HOME_PATH="/usr/lib/jvm/java-17-openjdk"
            ;;
        amzn)
            PKG_MGR="yum"
            PKG_INSTALL="yum install -y"
            PKG_UPDATE="yum update -y"
            JAVA_PACKAGE="java-17-amazon-corretto-devel"
            JAVA_HOME_PATH="/usr/lib/jvm/java-17-amazon-corretto"
            ;;
        *)
            log_error "Unsupported distribution: $ID"
            exit 1
            ;;
    esac
else
    log_error "Cannot detect Linux distribution"
    exit 1
fi

# Validate arguments if provided
if [ $# -gt 2 ]; then
    usage
fi

log_info "Starting SonarQube Scanner installation on $PRETTY_NAME"

# Step 1: Update system packages
echo -e "${BLUE}[1/7] Updating system packages...${NC}"
$SUDO $PKG_UPDATE
log_success "System packages updated"

# Step 2: Install Java and dependencies
echo -e "${BLUE}[2/7] Installing Java 17 and dependencies...${NC}"
$SUDO $PKG_INSTALL $JAVA_PACKAGE wget unzip curl

# Verify Java installation
if ! command -v java >/dev/null 2>&1; then
    log_error "Java installation failed"
    exit 1
fi

JAVA_VERSION=$(java -version 2>&1 | head -n1 | cut -d'"' -f2 | cut -d'.' -f1)
if [ "$JAVA_VERSION" -lt 11 ]; then
    log_error "Java 11 or higher is required. Found version: $JAVA_VERSION"
    exit 1
fi
log_success "Java $JAVA_VERSION installed successfully"

# Step 3: Download SonarQube Scanner
echo -e "${BLUE}[3/7] Downloading SonarQube Scanner CLI...${NC}"
cd /tmp
SCANNER_ZIP="sonar-scanner-cli-${SONAR_VERSION}-linux.zip"
SCANNER_URL="https://binaries.sonarsource.com/Distribution/sonar-scanner-cli/${SCANNER_ZIP}"

if ! wget -q --show-progress "$SCANNER_URL"; then
    log_error "Failed to download SonarQube Scanner"
    exit 1
fi
log_success "SonarQube Scanner downloaded"

# Step 4: Install SonarQube Scanner
echo -e "${BLUE}[4/7] Installing SonarQube Scanner...${NC}"
$SUDO unzip -q "$SCANNER_ZIP" -d /opt/
$SUDO mv "/opt/sonar-scanner-${SONAR_VERSION}-linux" /opt/sonar-scanner
$SUDO chown -R root:root /opt/sonar-scanner
$SUDO chmod 755 /opt/sonar-scanner/bin/sonar-scanner
$SUDO chmod -R 755 /opt/sonar-scanner/bin
$SUDO chmod -R 644 /opt/sonar-scanner/conf/*
rm -f "/tmp/$SCANNER_ZIP"
log_success "SonarQube Scanner installed to /opt/sonar-scanner"

# Step 5: Configure environment variables
echo -e "${BLUE}[5/7] Configuring environment variables...${NC}"
$SUDO tee /etc/profile.d/sonarqube-scanner.sh > /dev/null << EOF
#!/bin/bash
export SONAR_SCANNER_HOME="/opt/sonar-scanner"
export PATH="\$PATH:/opt/sonar-scanner/bin"
export JAVA_HOME="$JAVA_HOME_PATH"
EOF

$SUDO chmod 644 /etc/profile.d/sonarqube-scanner.sh

# Source the environment for current session
export SONAR_SCANNER_HOME="/opt/sonar-scanner"
export PATH="$PATH:/opt/sonar-scanner/bin"
export JAVA_HOME="$JAVA_HOME_PATH"

log_success "Environment variables configured"

# Step 6: Configure global scanner properties
echo -e "${BLUE}[6/7] Configuring global scanner properties...${NC}"
$SUDO tee /opt/sonar-scanner/conf/sonar-scanner.properties > /dev/null << EOF
# SonarQube server configuration
sonar.host.url=$SONAR_HOST_URL
sonar.login=$SONAR_TOKEN

# Default source encoding
sonar.sourceEncoding=UTF-8

# Scanner performance settings
sonar.scanner.javaOpts=-Xmx2048m
EOF

$SUDO chmod 644 /opt/sonar-scanner/conf/sonar-scanner.properties
log_success "Global scanner properties configured"

# Step 7: Create sample project configurations
echo -e "${BLUE}[7/7] Creating sample project configurations...${NC}"
SAMPLES_DIR="/opt/sonar-scanner/samples"
$SUDO mkdir -p "$SAMPLES_DIR"

# Java project sample
$SUDO tee "$SAMPLES_DIR/java-project.properties" > /dev/null << 'EOF'
# Project identification
sonar.projectKey=my-java-project
sonar.projectName=My Java Application
sonar.projectVersion=1.0

# Source and binary directories
sonar.sources=src/main/java
sonar.java.binaries=target/classes
sonar.java.libraries=target/dependency/*.jar

# Test configuration
sonar.tests=src/test/java
sonar.java.test.binaries=target/test-classes

# Coverage reports
sonar.coverage.jacoco.xmlReportPaths=target/site/jacoco/jacoco.xml
EOF

# Python project sample
$SUDO tee "$SAMPLES_DIR/python-project.properties" > /dev/null << 'EOF'
# Project identification
sonar.projectKey=my-python-project
sonar.projectName=My Python Application
sonar.projectVersion=1.0

# Source configuration
sonar.sources=src
sonar.python.version=3.9,3.10,3.11,3.12

# Test configuration
sonar.tests=tests
sonar.python.coverage.reportPaths=coverage.xml
sonar.python.xunit.reportPath=test-reports/pytest.xml

# Exclusions
sonar.exclusions=**/*_test.py,**/test_*.py,**/__pycache__/**
EOF

# JavaScript project sample
$SUDO tee "$SAMPLES_DIR/javascript-project.properties" > /dev/null << 'EOF'
# Project identification
sonar.projectKey=my-javascript-project
sonar.projectName=My JavaScript Application
sonar.projectVersion=1.0

# Source configuration
sonar.sources=src
sonar.javascript.file.suffixes=.js,.jsx

# Test configuration
sonar.tests=tests
sonar.test.inclusions=**/*.test.js,**/*.spec.js
sonar.javascript.lcov.reportPaths=coverage/lcov.info

# Exclusions
sonar.exclusions=node_modules/**,build/**,dist/**
EOF

$SUDO chmod 644 "$SAMPLES_DIR"/*.properties
log_success "Sample project configurations created in $SAMPLES_DIR"

# Final verification
echo -e "${BLUE}Verifying installation...${NC}"
if /opt/sonar-scanner/bin/sonar-scanner --version >/dev/null 2>&1; then
    SCANNER_VERSION=$(/opt/sonar-scanner/bin/sonar-scanner --version | head -n1)
    log_success "SonarQube Scanner installed successfully: $SCANNER_VERSION"
    log_info "Scanner binary: /opt/sonar-scanner/bin/sonar-scanner"
    log_info "Global config: /opt/sonar-scanner/conf/sonar-scanner.properties"
    log_info "Sample configs: $SAMPLES_DIR"
    log_warning "Please restart your shell or run 'source /etc/profile.d/sonarqube-scanner.sh' to use sonar-scanner command"
else
    log_error "SonarQube Scanner verification failed"
    exit 1
fi