Gradle Build takes long time while running from Jenkins slave but its faster when I run from local command line

2020-08-26 Thread Saravanan Manickam
Gradle Clean/Build takes long time while running from Jenkins slave but its faster when I run from local command line on the same slave with the same user logged in. I have a gradle job configured and it runs as part of multi branch pipeline. * Checkout - First stage * Clean - Second stage * Buil

Declarative pipeline to use agent as both docker & slave machines with label

2020-08-26 Thread john levin
Hello Everyone I have a scenario like i need to run my CI builds in a container and this container should run on slave machines accordingly (i have same image in all my slave machines). But pipeline is accepting either agent as docker or slave machines. -- You received this message because

Re: Security Vulnerability on my Jenkins Server

2020-08-26 Thread eric....@gmail.com
I think I found the solution to this: https://www.thegeekdiary.com/how-to-disable-md5-based-hmac-algorithms-for-ssh/ On Tuesday, August 25, 2020 at 1:59:49 PM UTC-6 eric@gmail.com wrote: > I'm confused. It doesn't look like the ciphers the vulnerability is > citing are allowed in the ja

Vulnerability in JQuery on Jenkins

2020-08-26 Thread eric....@gmail.com
Hi All, Just got gigged by our security team for a vulnerability in Jenkins with the version of JQuery installed. How do I go about updating the version of JQuery Jenkins runs? Here's the specifics of the vulnerability: Plugin Output: URL : http://myMachine:8081/js/jquery-1.1

Re: Vulnerability in JQuery on Jenkins

2020-08-26 Thread vince bailey
Hi All, You need to go to min 2.241 or 2.251 there are security issues on older version. docker containers jenkins/jenkins:2.241 jenkins/jenkins:2.51 or go to this website https://www.jenkins.io/download/ -- Regards, Vince Bailey Live long and prosper !!! > On 26 Aug 2020, at 15:38,

RE: Vulnerability in JQuery on Jenkins

2020-08-26 Thread Jérôme Godbout
So it mean the LTS 2.235.5 is not cover by those security fix? jquery 1.11 is old, like 2014 and security patch stopped in 2015. From: jenkinsci-users@googlegroups.com On Behalf Of vince bailey Sent: August 26, 2020 10:45 AM To: 'Björn Pedersen' via Jenkins Users Subject: Re: Vulnerability in

Re: Vulnerability in JQuery on Jenkins

2020-08-26 Thread vince bailey
Hi All, It’s is because of the plugins mainly, LTS versions are more stable and are supported for a long time but they are not update to fix security holes and your jenkins server will often ask you to update your war file. Or what ever process you use to update Jenkins. PS if your jenkins sit

Re: Vulnerability in JQuery on Jenkins

2020-08-26 Thread Ullrich Hafner
You cannot update this specific version. There are still some plugins (and maybe some old core scripts as well) that use jQuery 1, so we cannot remove that dependency. If a new plugin wants to use jQuery then there is an additional plugin available: https://github.com/jenkinsci/jquery3-api-plugi

Re: Vulnerability in JQuery on Jenkins

2020-08-26 Thread vince bailey
Yeah, Plugins can be a pain in the neck. You could build a jenkins server as a test server as a test rig which is what I do as a docker container with all your current software and test the new plugins. That will at least ensure that after your testing you will know if your pipeline still wor

Re: Declarative pipeline to use agent as both docker & slave machines with label

2020-08-26 Thread john levin
Hello, The answer is straight forward, I missed somehow. Under agent just include label options pipeline { agent { docker { image 'node:14-alpine' label '' } } Thank you On Wed, 26 Aug, 2020, 6:23 pm john levin, wrote: > > Hello Everyone > > I have a sce

Re: Security Vulnerability on my Jenkins Server

2020-08-26 Thread Ivan Fernandez Calvo
I was wrong you cannot configure the ciphers for the ssh server on the Java security files. The SSH server on Jenkins uses the https://github.com/apache/mina-sshd , IIRC the Jenkins implementation of the ssh server not read the sshd_config files so it is not posible to configure the ssh server.

Re: Gradle Build takes long time while running from Jenkins slave but its faster when I run from local command line

2020-08-26 Thread Ivan Fernandez Calvo
When you run the job on Jenkins the agent process is writing more files to the workspace, like the log so the IO speed to the NFS server is really important, I would not recommend to use NFS for the workspace if you cannot ensure a 100-150MB/s IO and NFSv4 protocol https://support.cloudbees.com

Windows slave by ssh

2020-08-26 Thread Jérôme Godbout
Hi, I'm trying to access a Windows slave with SSH using Linux master Jenkins 2.235.5. [08/26/20 15:24:48] [SSH] Checking java version of c:\JenkinsSlave/jdk/bin/java Couldn't figure out the Java version of c:\JenkinsSlave/jdk/bin/java The system cannot find the path specified. [08/26/20 15:2

Re: Windows slave by ssh

2020-08-26 Thread Slide
It looks like this code would need to be updated to handle when there are spaces: https://github.com/jenkinsci/ssh-slaves-plugin/blob/master/src/main/java/hudson/plugins/sshslaves/JavaVersionChecker.java#L91. I have the reverse, a Windows controller and Linux agents. I specify the JAVA_HOME environ

WebSocket Agents and Archiving Artifacts Performance

2020-08-26 Thread Tim Black
Is there any reason to believe that using the new -webSocket mode for agents would be any less sluggish at archiving artifacts from agent to master than ssh mode? Using the ssh-slaves-plugin I'm getting abysmal throughput (~13Mbps) when artifacts are being copied from agent to master, despite

RE: Windows slave by ssh

2020-08-26 Thread Jérôme Godbout
Well, that doesn’t really help to put quote into the JAVA_HOME variable either: [08/26/20 16:48:23] [SSH] Checking java version of "C:\Program Files\Java\jdk1.8.0_161"/bin/java Couldn't figure out the Java version of "C:\Program Files\Java\jdk1.8.0_161"/bin/java '"C:\Program Files\Java\jdk1.8.0_1

Re: Windows slave by ssh

2020-08-26 Thread Mark Waite
I've preferred to install AdoptOpenJDK in a location that does not include spaces. Oracle JDK licensing is more restrictive than I'm willing to accept and I want the latest Java 8 fixes. On Wed, Aug 26, 2020 at 2:23 PM Slide wrote: > It looks like this code would need to be updated to handle wh

RE: Windows slave by ssh

2020-08-26 Thread Jérôme Godbout
WARNING, the following message contain strong opinion, if that do not suit you, stop reading now. Don’t worry, I hate all Java equally... they fail the only promise they ever had, run everywhere… I hope this language rot in hell. From: jenkinsci-users@googlegroups.com On Behalf Of Mark Waite

Re: HTML Publisher pipeline syntax

2020-08-26 Thread Marco Sacchetto
According to the (non-optimal, I agree) documentation, where the pipeline steps options do match those on the UI in the freestyle jobs, `includes` does not accept multiple entries. Yours anyway are not needed both because "pick up all the files in the folder" is the default setting, and because

RE: Windows slave by ssh

2020-08-26 Thread Jérôme Godbout
Hi, Reinstalling Java into a path like c:\Java work just fine now. Wonder why the Linux and the Windows master doesn’t show the same behavior on this? Is this code part only for *nix platform? Anyway, thanks for the pointer, Jerome From: jenkinsci-users@googlegroups.com On Behalf Of Slide Sen

Re: Windows slave by ssh

2020-08-26 Thread Slide
Historically, Windows agents couldn't really be run using this plugin, it is only somewhat recently that Windows had good SSH support. So, there are probably some leftovers from the plugin only being used on *NIX systems. On Wed, Aug 26, 2020 at 2:07 PM Jérôme Godbout wrote: > Hi, > > Reinstalli

RE: Windows slave by ssh

2020-08-26 Thread Jason Pyeron
Sorry to be a Johnny come lately – but we have only used SSH launch of windows for quite a long time now. We use Cygwin to do so. You can use any SSH server though. The most important thing is to ensure Java’s home has no spaces in the path. The second most important thing is to use mi

Re: Windows slave by ssh

2020-08-26 Thread Slide
Well, running on Cygwin is almost like running on a *NIX platform. Not exactly, but almost. I am referring to the OpenSSH-Win64 port that is now supported by MS. On Wed, Aug 26, 2020 at 2:50 PM Jason Pyeron wrote: > Sorry to be a Johnny come lately – but we have only used SSH launch of > windows