Strange github auth issue (on OSX)

2013-11-08 Thread Hendrik K
I set up Jenkins on one of our OSX machines to poll our Github repository and build our iOS apps. This was working great originally. However recently the github authentication stopped working. I am not 100% sure, but I think it probably was upgrading the machine to Mavericks that started thi

Build Flow plugin - Groovy: how to trigger a project that is non blocking

2013-11-08 Thread Josh H
Currently we trigger projects by using build("name of project");.. etc. This blocks the build flow until the build is finished. Is there a way to trigger a project that is nonblocking, and then immediately execute other groovy tasks afterwards? ie: build1 = nonblockingbuild("foo"); print "whateve

Re: Automated install of JDK doesn't seem to work on a Mac

2013-11-08 Thread Thomas Keller
Hi, Following the game-of-life tutorial setup description I was confused. I finally figured out you don't want Jenkins to install Maven or JDK if you have the OS X developer tools installed. Just check java --version and mvn --version for the home directory and put that into the appropriate HOME

Re: job parameters in combination filter not working - always evaluate to true

2013-11-08 Thread oliver gondža
Hi, this should work without help from any plugin (you should not need $ in Groovy expression). There are regression tests to exercise this feature[1][2] you can look at. Provided it does not work in some situations, please file as issue and attach config.xml of reproducing job. [1] htt

Re: Matrix build questions

2013-11-08 Thread Ingo Richter
Thank you very much for the explanation. This makes more sense now for me. - Ingo On Sunday, October 27, 2013 4:52:27 PM UTC-7, Owen B. Mehegan wrote: > > Matrix builds are special. I use them heavily so I'll try to explain - > someone else may be able to do a better job. > > Matrix builds perfo

job parameters in combination filter not working - always evaluate to true

2013-11-08 Thread bwise
Update: I tried the Node Label Plugin but this does not quite solve my problem because it overrides, vs supplements the labels being used for the job. If anyone can provide the correct syntax for using job parameters in the combination filter, it would be greatly appreciated. -- View this messa

Issues renaming plug in

2013-11-08 Thread drm4652
Hey, I'm working on a plug in for my company, I used the skeleton plugin for the tutorial used on the jenkins website. I want to rename the default .java file which is defaulted to "HelloWorldBuilder" in the tutorial, but everytime I do, the plug in no longer functions. It still builds fine but

Re: Best practices for handling Git credentials securely with Jenkins

2013-11-08 Thread Robert Krüger
OK, thank you. On Fri, Nov 8, 2013 at 5:39 PM, nicolas de loof wrote: > I recommended ssh over self-signed certificate http that require extra > configuration. Not from a security perspective. > > Le 8 nov. 2013 12:50, "Robert Krüger" a écrit : >> >> Hi, >> >> I am setting up a Jenkins Job whic

Re: Best practices for handling Git credentials securely with Jenkins

2013-11-08 Thread Robert Krüger
Thanks. On Fri, Nov 8, 2013 at 1:46 PM, Stephen Connolly wrote: > The credentials database is encrypted using Jenkins' secret key > infrastructure. Obviously Jenkins can decrypt them as Jenkins has the secret > key... and the secret keys are stored on disk in $JENKINS_HOME, but I assure > you the

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Robert Krüger
in our case its only an interim solution. we will buy the cert :-). On Fri, Nov 8, 2013 at 4:41 PM, nicolas de loof wrote: > Right. So looks secure but actually unsecured. > > Le 8 nov. 2013 16:39, "Kevin Fleming (BLOOMBERG/ 731 LEXIN)" > a écrit : > >> It does make things secure if you also use

Findbugs reports are not being display

2013-11-08 Thread SamL
Hello Folks, We have two Maven Jenkins Jobs that are not displaying the results generated by the findbugs plugin. One of the jobs is running Mave 2.2.1 and the other is Maven 3.0.3 We are running Jenkins 1.509.4 on Ubuntu 12.04. The jobs themselves are running Ubuntu 12.04 as well. Jenkins Fi

Re: How open source Project Build system works ?

2013-11-08 Thread Dhanasekaran Anbalagan
thanks Mark.. sure i will read. Did I learn something today? If not, I wasted it. On Fri, Nov 8, 2013 at 10:15 AM, Mark Waite wrote: > That's a very broad question to a more narrowly focused group (Jenkins > users). Can you explain what you're trying to achieve by asking so broad a > question

Re: Best practices for handling Git credentials securely with Jenkins

2013-11-08 Thread nicolas de loof
I recommended ssh over self-signed certificate http that require extra configuration. Not from a security perspective. Le 8 nov. 2013 12:50, "Robert Krüger" a écrit : > Hi, > > I am setting up a Jenkins Job which accesses a Git (Stash) repo over > HTTPS using global credentials. Since I was not

Re: [ANN] Credentials plugin 1.9.3 - now with in-place add support

2013-11-08 Thread Stephen Connolly
Because then: 1. You don't know that the plugin is using the c:select tag 2. You don't know that adding is possible and you would need to ask your Jenkins admin But if there are big complaints we can switch it to hide... On 8 November 2013 16:14, jieryn wrote: > Why not just hide the button e

Re: [ANN] Credentials plugin 1.9.3 - now with in-place add support

2013-11-08 Thread jieryn
Why not just hide the button entirely? On Fri, Nov 8, 2013 at 10:55 AM, Stephen Connolly < stephen.alan.conno...@gmail.com> wrote: > One more thing... if you don't have permission to create credentials, the > button will be disabled... > > -- You received this message because you are subscribed

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Andrew Melo
*shrug* The checkouts are anonymous and the two machines are on the same rack. Sure, in an ideal world, I'd have it fixed, but I've got bigger fish to fry On Fri, Nov 8, 2013 at 10:01 AM, Stephen Connolly < stephen.alan.conno...@gmail.com> wrote: > So one can put a man in the middle between jenk

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Stephen Connolly
So one can put a man in the middle between jenkins and your git repo, sniff you password and start hacking away at your system then interesting! On 8 November 2013 15:45, Andrew Melo wrote: > In my case (as one of the stupid people), I have the CA in the rest of the > stack set up properly,

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Andrew Melo
In my case (as one of the stupid people), I have the CA in the rest of the stack set up properly, but Jenkins is the only bit of software I use that's java, so I never bothered trying to figure out the incantations to get the CA added. It's everywhere else though, so I'm not too concerned with some

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread nicolas de loof
Right. So looks secure but actually unsecured. Le 8 nov. 2013 16:39, "Kevin Fleming (BLOOMBERG/ 731 LEXIN)" < kpflem...@bloomberg.net> a écrit : > It does make things secure if you also use client-side certificates and > check them on the server side (so that a client-side certificate is > mandato

Re: Error when upgrading 1.537 -> 1.538 on Ubuntu with native packages

2013-11-08 Thread Kevin Fleming (BLOOMBERG/ 731 LEXIN)
As I posted earlier, just create the directory yourself. Someone who is involved in building the packages will need to update the packaging scripts. - Original Message - From: jenkinsci-users@googlegroups.com To: jenkinsci-users@googlegroups.com At: Nov 8 2013 10:40:18 I am also getting

Re: Error when upgrading 1.537 -> 1.538 on Ubuntu with native packages

2013-11-08 Thread Rob Charlwood
I am also getting this issue. Any ideas? On Wednesday, November 6, 2013 5:20:47 AM UTC, jyrki wrote: > > Hello > > I got following error while upgrading from 1.537 -> 1.538 on Ubuntu: > > > >> Preparing to replace jenkins 1.537 (using >>> .../archives/jenkins_1.538_all.deb) ... >> >> * Stoppin

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread nicolas de loof
Then you have added certificate in local JVM trustsore, and its valid from java point of view, and shouldn't require this option. It looks like people do enable http but just don't validate certificate. Le 8 nov. 2013 16:38, "Stephen Connolly" a écrit : > To stop the password from going in plain

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Stephen Connolly
Well there's no stopping people from being stupid! On 8 November 2013 15:40, nicolas de loof wrote: > Then you have added certificate in local JVM trustsore, and its valid from > java point of view, and shouldn't require this option. It looks like people > do enable http but just don't validate

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Kevin Fleming (BLOOMBERG/ 731 LEXIN)
It does make things secure if you also use client-side certificates and check them on the server side (so that a client-side certificate is mandatory to establish a connection). It also encrypts the traffic on the wire, but of course does not protect against man-in-the-middle attacks. - Ori

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Stephen Connolly
To stop the password from going in plain text... as long as you have set up the trust of the self-signed cert correctly you know there is no MiM listening in... of course you could be MiM'd while setting up the initial trust... On 8 November 2013 15:36, nicolas de loof wrote: > I don't understa

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread nicolas de loof
I don't understand why people host git over https with self-signed certificate. This don't make things secure, so why not just use http ? I only have used self-signed certificate for development/test of https webapps. Le 8 nov. 2013 16:33, "nicolas de loof" a écrit : > Add this as a java system

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread nicolas de loof
Add this as a java system property to your java command line. Le 8 nov. 2013 15:49, "Саша Щербаков" a écrit : > Could anybody explain how to run Jenkins with org.jenkinsci.plugins. > gitclient.GitClient.untrustedSSL=true ? > > Thanks > > Пʼятниця, 8 листопада 2013 р. 16:41:48 UTC+2 користувач Kev

Re: How open source Project Build system works ?

2013-11-08 Thread Mark Waite
That's a very broad question to a more narrowly focused group (Jenkins users). Can you explain what you're trying to achieve by asking so broad a question? Google search and study of the search results will give you more insight than posting to a specific mailing list. Choose several interesting

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Саша Щербаков
Could anybody explain how to run Jenkins with org.jenkinsci.plugins.gitclient.GitClient.untrustedSSL=true ? Thanks Пʼятниця, 8 листопада 2013 р. 16:41:48 UTC+2 користувач Kevin Fleming написав: > > I am starting to think that the new credentials system may be just a bit > over-engineered :-) >

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Kevin Fleming (BLOOMBERG/ 731 LEXIN)
I am starting to think that the new credentials system may be just a bit over-engineered :-) - Original Message - From: jenkinsci-users@googlegroups.com To: jenkinsci-users@googlegroups.com At: Nov 8 2013 07:50:15 Ahhh did you not add any specifications to the domain? You need to provi

How open source Project Build system works ?

2013-11-08 Thread Dhanasekaran Anbalagan
Hi Guys, I want to know How open source projects build process happening. I my understanding some them tools will do this jenkins bamboo CI Servers, For example like hadoop and linux kernel have lot of contributors all over world. When each guys pushing code to repo. How it will check integrity an

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Stephen Connolly
Ahhh did you not add any specifications to the domain? You need to provide the domain with some specifications to match against. The domain's name is only used by humans... the specifications are used by Jenkins. If there is at least 1 specification, then the credentials in that domain will be av

Re: Best practices for handling Git credentials securely with Jenkins

2013-11-08 Thread Stephen Connolly
The credentials database is encrypted using Jenkins' secret key infrastructure. Obviously Jenkins can decrypt them as Jenkins has the secret key... and the secret keys are stored on disk in $JENKINS_HOME, but I assure you the passwords themselves are not stored in plain text or a simple obfuscated

Best practices for handling Git credentials securely with Jenkins

2013-11-08 Thread Robert Krüger
Hi, I am setting up a Jenkins Job which accesses a Git (Stash) repo over HTTPS using global credentials. Since I was not asked for a password for encrypting the credentials database, I guess they are not strongly encrypted in the XML file where they are stored. Is there a more secure way of settin

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Robert Krüger
On Fri, Nov 8, 2013 at 12:18 PM, Robert Krüger wrote: > Thanks, that works now with credentials in the URL. > > Is there any way I can use the credentials mechanism instead? > Shouldn't I have the credentials for that domain in the list? It does work if I enter global credentials. I guess I misun

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Robert Krüger
Thanks, that works now with credentials in the URL. Is there any way I can use the credentials mechanism instead? Shouldn't I have the credentials for that domain in the list? On Fri, Nov 8, 2013 at 11:00 AM, nicolas de loof wrote: > run jenkins with org.jenkinsci.plugins.gitclient.GitClient.unt

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread nicolas de loof
run jenkins with org.jenkinsci.plugins.gitclient.GitClient.untrustedSSL=true Anyway I recommend ssh 2013/11/8 Robert Krüger > On Fri, Nov 8, 2013 at 10:41 AM, nicolas de loof > wrote: > > does your git repo use sef-signed certificates ? > > Yes ist does. Is there no way to specify something l

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread Robert Krüger
On Fri, Nov 8, 2013 at 10:41 AM, nicolas de loof wrote: > does your git repo use sef-signed certificates ? Yes ist does. Is there no way to specify something like GIT_SSL_NO_VERIFY=true or specify/import the CA cert somewhere? > can't you use ssh to access it ? I have to check with our sysad.

Re: Can't get Git access (stash) with credentials to work

2013-11-08 Thread nicolas de loof
does your git repo use sef-signed certificates ? can't you use ssh to access it ? 2013/11/8 Robert Krüger > Hi, > > I just installed a fresh Jenkins 1.538 on Mac OS 10.8.5 and am trying > to configure a Job that checks out from a Git repository hosted on a > Stash server. The git/stash access i

Can't get Git access (stash) with credentials to work

2013-11-08 Thread Robert Krüger
Hi, I just installed a fresh Jenkins 1.538 on Mac OS 10.8.5 and am trying to configure a Job that checks out from a Git repository hosted on a Stash server. The git/stash access is via https and protected using http credentials. I Installed the Git plugin but when I enter the repository URL (e.g.

Re: Jenkins screenshots usage policy

2013-11-08 Thread tzieleniewski
W dniu piątek, 8 listopada 2013 10:00:36 UTC+1 użytkownik maciej napisał: > tziele...@gmail.com (2013-11-08 08:41): > > Hi, > > Well I am simply not sure. > I should precise that I meant screenshots made by me not others. > As an engineer not a lawyer I want to make sure that screenshots >

Re: Jenkins screenshots usage policy

2013-11-08 Thread Maciej Jaros
tzieleniew...@gmail.com (2013-11-08 08:41): Hi, Well I am simply not sure. I should precise that I meant screenshots made by me not others. As an engineer not a lawyer I want to make sure that screenshots usage/presentation doesn't breach any Jenkins CI trademarks or content copyrights. I didn