search

juju-solutions / layer-cwr

Layer for building the Juju Jenkins CI env
Other
2 stars 5 forks source link

Failed to install Jenkins plugins #125

Open seman opened 7 years ago

seman commented 7 years ago

I keep getting Failed to install Jenkins plugins error after deploying cwr-ci bundle. I also tried to remove-relation and add-relation without a success. Looking at the log, I see the following but I don't why installing postbuildscript failed:


unit-cwr-0.log:2017-04-11 22:07:18 INFO juju-log jenkins:0: Installing plugin postbuildscript. Restart required: True
unit-cwr-0.log:2017-04-11 22:12:18 INFO juju-log jenkins:0: installation of postbuildscript did not complete on time.
unit-cwr-1.log:2017-04-11 22:48:51 INFO juju-log jenkins:1: Installing plugin postbuildscript. Restart required: False
unit-cwr-1.log:2017-04-11 22:53:52 INFO juju-log jenkins:1: installation of postbuildscript did not complete on time.

Full unit-cwr-0.log: https://pastebin.canonical.com/185596/

$ juju status
Model    Controller  Cloud/Region     Version
default  gce-cwr     google/us-east1  2.1.2

App      Version  Status   Scale  Charm    Store       Rev  OS      Notes
cwr               blocked      1  cwr      jujucharms   70  ubuntu  exposed
jenkins           active       1  jenkins  jujucharms    4  ubuntu  exposed

Unit        Workload  Agent  Machine  Public address  Ports     Message
jenkins/0*  active    idle   0        35.190.143.219  8080/tcp  Jenkins is running
  cwr/1*    blocked   idle            35.190.143.219            Failed to install Jenkins plugins. Retry by removing/adding cwr relation.

Machine  State    DNS             Inst id        Series  AZ
0        started  35.190.143.219  juju-f84b28-0  xenial  us-east1-b

Relation   Provides  Consumes  Type
extension  cwr       jenkins   regular
jenkins    jenkins   cwr       subordinat
kwmonroe commented 7 years ago

Looks like both postbuildscript and scripttrigger have security vulns (as of 2 days ago): https://jenkins.io/security/advisory/2017-04-10/.

They were probably pulled from the jenkins plugin repo until a fix is found. @ktsakalozos may have some insight here as to whether or not we can make those plugins optional.

ktsakalozos commented 7 years ago

The cwr build bunlde action will trigger only if there are updates for the bunlde. This check is a script and needs the scripttrigger plugin.

Postbuildscript (I think) is needed for grabbing the test results and present them as unit tests within jenkins.

Not sure right now how we should proceed. We can wait for fixes on the plugins but this leaves the charm broken. We can try to find replacement plugins this has some unknowns. We can (?) force the installation of the scripts and accept the fact that this charm has vulnerabilities.