Possible infrastructure compromise

Last week, the infrastructure team identified the potential compromise of a key infrastructure machine. This compromise could have taken advantage of, what I could be categorized as, an attempt to target contributors with elevated access. Unfortunately, when facing the uncertainty of a potential

Re: GPG signatures on http://repo.jenkins-ci.org/ incorrect?

On Friday, April 22, 2016 at 6:03:08 PM UTC-4, Daniel Beck wrote: > > > > On 22.04.2016, at 17:02, Steven Clark > wrote: > > > > Is anyone else aware that the GPG signatures seem to be faulty on the > repo? Or am I not verifying them correctly? > > You're right.

Extracting credentials from Jenkins server

Hi guys, I'm trying to extract credentials from Jenkins server and migrate them to a new server I'm setting up. I don't want to simply copy whole /var/lib/jenkins directory, because I inherited an instance which isn't documented very well. I'm trying to rectify that by migrating step by step

Re: GPG signatures on http://repo.jenkins-ci.org/ incorrect?

I figured out what was wrong. During the release process, GPG signing happened before jarsigner happened. jarsigner inserts the signature into the war file, which changes the war. So the signature became invalid. In 2.0 release, jarsigner somehow run before gpg, so it produced the correct

Re: GPG signatures on http://repo.jenkins-ci.org/ incorrect?

> On 22.04.2016, at 17:02, Steven Clark wrote: > > Is anyone else aware that the GPG signatures seem to be faulty on the repo? > Or am I not verifying them correctly? You're right. Something's wrong with KK's machine doing the signing (his local Maven repo is

Re: A program accessible directly on MAC system is reported as "command not found"

> On 22.04.2016, at 19:47, Naveen G.M. wrote: > > When I extended the same job to run on a MAC system, the MAC job is failing > by saying "command not found". > If I login directly on the MAC system and run the same command, it runs > without any problems. Your

Re: why is the groovy code failing in jenkins?

> On 22.04.2016, at 17:03, ok999 wrote: > > Is this issue intermittent by any chance ? I thought i got it working > yesterday (the looping part) thanks to stackoverflow but it wont perform the > loop today (on a friday!!!) No. However, there was a version of the

Re: Under Jenkins SignTool Error "No certificates were found", works fine logged on as user

My dongle is from Symantec. When I spoke to them about this last year, they didn't have much help to offer. Please let me know if you find something. On Fri, Apr 22, 2016 at 3:37 PM, Tim Mills < tmi...@citystateentertainment.com> wrote: > My understanding was that a certain category of Safenet

Re: Under Jenkins SignTool Error "No certificates were found", works fine logged on as user

My understanding was that a certain category of Safenet dongles could be configured to be "rdp enabled" though I'm not certain this is something digicert, or the dongles they issue, are capable of. My hope was that Ed's solution would magically circumvent this limitation. I'm also in the

Re: Under Jenkins SignTool Error "No certificates were found", works fine logged on as user

I've had the same experience. The dongle cannot be used from an RDP session. And RDPing into the machine will require the password to be re-entered. I spoke to the vendor (Safenet) and they said RDP is not supported and it was intentionally done for security purposes. On Fri, Apr 22, 2016 at 3:20

Re: Under Jenkins SignTool Error "No certificates were found", works fine logged on as user

I'm investigating this solution and I'm curious if you know if RDPing into the box will cause bad things to happen? My experience has been that the dongle doesn't work for RDP users and each time I RDP into the box I have to re-enter the password by logging into a local session. I'm worried

Re: Changing git build creds

I already did that. How can I see what it's getting "Permission denied" on? On Fri, Apr 22, 2016 at 1:34 PM, Indra Gunawan (ingunawa) wrote: > Don’t you need to upload the SSH public key of the build user to your > github? > > From: on

A program accessible directly on MAC system is reported as "command not found"

Hi, Jenkins Version : Jenkins ver. 1.638 I have configured a Jenkins Matrix Job which is running file on Windows system. When I extended the same job to run on a MAC system, the MAC job is failing by saying "command not found". If I login directly on the MAC system and run the same command,

Re: Changing git build creds

Don't you need to upload the SSH public key of the build user to your github? From: > on behalf of Larry Martell > Reply-To:

Changing git build creds

I am a new user to Jenkins, so please bear with me. The employee who set up Jenkins quit and we removed his access to our github repo. But he had configured our automated build to access git as himself, so of course that is failing now. I went into the project settings and added a new

Re: why is the groovy code failing in jenkins?

Is this issue intermittent by any chance ? I thought i got it working yesterday (the looping part) thanks to stackoverflow but it wont perform the loop today (on a friday!!!) node('windows') { checkout([$class: 'GitSCM', branches: [[name: '*/master']], doGenerateSubmoduleConfigurations:

GPG signatures on http://repo.jenkins-ci.org/ incorrect?

Hello all, Is anyone else aware that the GPG signatures seem to be faulty on the repo? Or am I not verifying them correctly? gpg --verify jenkins-war-1.651.1.war.asc jenkins-war-1.651.1.war gpg: Signature made Thu 14 Apr 2016 01:05:31 AM EDT using DSA key ID D50582E6 gpg: BAD signature from

Grab'ing libraries in jenkins script console

Anyone know how to get this - or an equivalent - to work in jenkins script console? @Grab(group='org.codehaus.groovy.modules.http-builder', module='http-builder', version='0.7.2') import groovyx.net.http.* Thanks! -- You received this message because you are subscribed to the Google Groups

Re: https://updates.jenkins.io unstable?

It's all better this morning - thanks for the quick reply! On Friday, April 22, 2016 at 1:53:17 AM UTC-5, Daniel Beck wrote: > > > > On 22.04.2016, at 08:16, Daniel Beck > wrote: > > > > workaround > > Workout. It got a workout. > > It's still early morning here :-) > >

Re: Git Plugin: merge before build not working?

Hi, for me it wis working fine, although the setup is slightly different: 1) I have the full refspec specified: refs/...:refs/... 2) Additionally I use the gerrit trigger checkout strategy to really build a specific change. checkout(changelog: false, poll: false, scm: [$class:

Re: Git Plugin: merge before build not working?

Anyone got this to work? I'm running this in context of the multibranch pipeline plugin - so I'd like to get whatever branch is triggered to merge into an integration-branch before building, then pushing back to the integration branch if the build succeeds. torsdag 7. april 2016 03.13.37

Re: permission denied error when copying files in jenkins

You can check in the server console # su -l jenkins -s /bin/bash -c 'cp /location/path1/file1.txt /location2/path2/file1.txt' On Thursday, April 21, 2016 at 11:53:59 PM UTC+3, Pradeep Patra wrote: > > Hi all, > . I have created a Jenkins server (master) and tried copying from one >

Re: SCM Poll fails using pipeline

Never mind. I had the wrong/invalide credentials string the the git scm step. On Friday, April 22, 2016 at 1:25:11 PM UTC+2, Nick Witkowski wrote: > > Hi, > > We're running Jenkins ver. 1.609.3 and I have a pipeline job that > registers for polling. > > Looking at the "Git Polling Log" I see a

SCM Poll fails using pipeline

Hi, We're running Jenkins ver. 1.609.3 and I have a pipeline job that registers for polling. Looking at the "Git Polling Log" I see a permission denied error: Started on Apr 22, 2016 7:06:00 AM Using strategy: Default [poll] Last Built Revision: Revision

Re: Jenkins 2.0: Turn off Setup wizard

Currently I'm creating 2 files: /var/lib/jenkins/jenkins.install.UpgradeWizard.state ``` 2.0 ``` /var/lib/jenkins/init.groovy.d/basic-security.groovy ``` #!groovy import jenkins.model.* import hudson.security.* def instance = Jenkins.getInstance() println "--> creating local user 'admin'"

Re: How many jobs can handle by Jenkins master?

On 22 April 2016 at 07:24, dennys wrote: > We use Jenkins 1.554.3, I know it's old, we'll try to upgrade it. > And most projects are Maven 2/3, I think we cannot disable fingerprint of > Maven project, is it correct? > It is evil in many many ways:

Re: Regarding Jenkins Distributed build Vs Maven Parallel build

Hi All, Seems that Maven automatically partitions source code and perform parallel processing software building and testing. Here is the reference link: https://cwiki.apache.org/confluence/display/MAVEN/Parallel+builds+in+Maven+3 But for Jenkins whether this automatically partition the source

Re: How many jobs can handle by Jenkins master?

We use Jenkins 1.554.3, I know it's old, we'll try to upgrade it. And most projects are Maven 2/3, I think we cannot disable fingerprint of Maven project, is it correct? Btw, Jenkins copies all artifacts from slaves to master after build. Will it increase disk IO or network loading of Jenkins

Re: https://updates.jenkins.io unstable?

> On 22.04.2016, at 08:16, Daniel Beck wrote: > > workaround Workout. It got a workout. It's still early morning here :-) -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving

Re: https://updates.jenkins.io unstable?

> On 22.04.2016, at 00:45, jbat...@civisanalytics.com wrote: > > I saw someone else facing other network issues earlier today - maybe some of > the infrastructure is just in flux? Turns out you weren't the only one downloading 2.0 and downloading plugins, so the infra got a good workaround. I