はてなブックマーク

Jenkins is now secure out of the box: Administrators previously had to set up authentication and authorization while Jenkins was accessible to anyone on the same network. Now, Jenkins is protected out of the box, so that it is always safe from unauthorized access. Plugin selection for setup: We refined the plugin selection on the setup dialog. You’ve always wondered why Jenkins does not install th

Jenkins is an open source automation server with an unparalleled plugin ecosystem to support practically every tool as part of your delivery pipelines. Whether your goal is continuous integration, continuous delivery or something else entirely, Jenkins can help automate it. Jenkins 2 brings Pipeline as code, a new setup experience and other UI improvements all while maintaining total backwards com

The new Pipeline functionality in Jenkins allows you to define configuration as code, which can be checked in and version controlled along with the rest of your project’s source code. Defining your pipeline’s configuration as code makes it easier to create a simple "build and test" pipeline, while enabling more advanced and complex pipelines through the expressive Groovy-based domain specific lang

Note: This is a guest post by Kishore Bhatia. Kishore works for CloudBees, building custom frameworks with Open Source software and helping customers solve engineering problems around continuous delivery and DevOps at scale. This year some great new Jenkins features came out of the butler’s goodie bag - amongst them, the most important one being the ability to realize continuous delivery pipeline

In several places inside Jenkins, a series of "hook scripts" get executed to allow some actions to take place in reaction to some key events. These scripts are written in Groovy, and get executed inside the same JVM as Jenkins, allowing full access to the domain model of Jenkins. For given hook HOOK, the following locations are searched: WEB-INF/HOOK.groovy in jenkins.war WEB-INF/HOOK.groovy.d/*.g

If your Jenkins instance is running in a different location than your own (for example: the server is in NY but you are in LA), then the NY time zone will most probably be used. This may be quite annoying if you need to compare build dates. To see the time zone currently set, go to jenkins_server/systemInfo and see the user.timezone system property. You may want to change the time zone displayed t

This advisory announces a security vulnerability that was found in Jenkins core. This vulnerability allows attacker with an HTTP access to the server to retrieve the master cryptographic key of Jenkins. This key is used to encrypt sensitive data in configuration files under $JENKINS_HOME and in the HTML forms, authenticate agents connecting to the Jenkins controller, as well as the authenticate RE

Jenkins has a built-in command line interface that allows users and administrators to access Jenkins from a script or shell environment. This can be convenient for scripting of routine tasks, bulk updates, troubleshooting, and more. The command line interface can be accessed over SSH or with the Jenkins CLI client, a .jar file distributed with Jenkins. This document assumes Jenkins 2.54 or newer.

Jenkins is used everywhere from workstations on corporate intranets, to high-powered servers connected to the public internet. To safely support this wide spread of security and threat profiles, Jenkins offers many configuration options for enabling, editing, or disabling various security features. As of Jenkins 2.0, many of the security options were enabled by default to ensure that Jenkins envir

Legend: security fix major bug fix bug fix major enhancement enhancement What's new in 2.457 (2024-05-07) permalink to this entry Remove tooltip when a widget is refreshed. (issue 72744) Update bundled Script Security plugin from 1335.vf07d9ce377a_e to 1336.vf33a_a_9863911. (issue 73093) What's new in 2.456 (2024-04-30) permalink to this entry Update restart banner to align with updated banners. (

Jenkins defines extension points, which are interfaces or abstract classes that model an aspect of its behavior. Those interfaces define contracts of what need to be implemented, and Jenkins allows plugins to contribute those implementations. In general, all you need to do to register an implementation is to mark it with @Extension. Creating a new extension point is quite easy too, see defining a

A 'reverse proxy' allows an alternate HTTP or HTTPS provider to communicate with web browsers on behalf of Jenkins. The alternate provider may offer additional capabilities, like SSL encryption. The alternate provider may offload some work from Jenkins, like delivering static images. Jenkins actively monitors reverse proxy configuration. Jenkins reports “Your reverse proxy setup is broken” when it

Jenkins features a Groovy script console which allows one to run arbitrary Groovy scripts within the Jenkins controller runtime or in the runtime on agents. It is very important to understand all of the following points because it affects the integrity of your Jenkins installation. The Jenkins Script Console: Access is controlled by the Administer permission. Is a web-based Groovy shell into the J

Artwork The original Jenkins logo was created by our friends at Frontside. Special thanks to Charles Lowell for his efforts championing the logo's original design. Usage guidelines for the original logo can be found on our Press page. This page simply catalogues the many clever variations of Jenkins created by members of the Jenkins community. These images are also available in various sizes and S

The procedures in this chapter are for new installations of Jenkins. Jenkins is typically run as a standalone application in its own process. The Jenkins WAR file bundles Winstone, a Jetty servlet container wrapper, and can be started on any operating system or platform with a version of Java supported by Jenkins. Theoretically, Jenkins can also be run as a servlet in a traditional servlet contain