Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-40734

Shell step cannot use environment variables that contain $$

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • durable-task-plugin

      When I run a Jenkinsfile that has a sh step that uses an environment variable (such as a password) that has two $$ in a row, they get replaced with one $.

      Here's the steps to reproduce:
      1. Make a global credential id "foo", username "foo", password "bar$$baz"
      2. Use this Jenkinsfile:

      node('linux') {
    withCredentials([[$class: 'UsernamePasswordMultiBinding', credentialsId: 'foo', passwordVariable: 'PASSWORD', usernameVariable: 'USERNAME']]) {            
        echo "Username: ${env.USERNAME}"
        echo "Password: ${env.PASSWORD}"
        sh 'echo Username: $USERNAME, Password: $PASSWORD'
    }
}

      When the build runs, the echo steps properly echo the user/pass which are then masked. But the shell step doesn't mask the password, which is incorrect. It has lost a $

      [Pipeline] echo
Username: ****
[Pipeline] echo
Password: ****
[Pipeline] sh
[s_example] Running shell script
+ echo Username: ****, Password: bar$baz
Username: ****, Password: bar$baz

          [JENKINS-40734] Shell step cannot use environment variables that contain $$

          Ben Dean created issue -
          Jesse Glick made changes -
          Resolution New: Not A Defect [ 7 ]
          Status Original: Open [ 1 ] New: Resolved [ 5 ]
          Ben Dean made changes -
          Comment [ [~jglick], the shell script you suggested doesn't work either. Putting single quotes around the environment variables will cause bash (or sh, or dash, or whatever the shell is) to not evaluate them and the output of the build is:

          {code:none}
          + echo Username: $USERNAME, Password: $PASSWORD
          Username: $USERNAME, Password: $PASSWORD
          {code}

          If I change those to double quotes it will evaluate them, but it will have the same problem it had before

          {code:none}
          sh '''
          echo Username: "$USERNAME", Password: "$PASSWORD"
          '''
          {code}

          outputs:
          {code:none}
          + echo Username: ****, Password: bar$baz
          Username: ****, Password: bar$baz
          {code}

          And don't think to much about the {{echo}} command in the shell either. In the real place where I'm running into this problem, I'm passing the username and password to some CLI:

          {code:none}
          sh '''
          some-cli do stuff "$USERNAME" "$PASSWORD"
          '''
          {code}

          and they have to be double quoted there so bash will correctly pass the args to the command line if they contain spaces or other characters that have to be quoted. ]
          Ben Dean made changes -
          Resolution Original: Not A Defect [ 7 ]
          Status Original: Resolved [ 5 ] New: Reopened [ 4 ]
          Jesse Glick made changes -
          Component/s Original: pipeline [ 21692 ]
          Component/s Original: workflow-durable-task-step-plugin [ 21715 ]
          Assignee New: Jesse Glick [ jglick ]
          Labels Original: credentials environment-variables pipeline shell New: environment pipeline
          Jesse Glick made changes -
          Status Original: Reopened [ 4 ] New: Open [ 1 ]
          Jesse Glick made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Jesse Glick made changes -
          Remote Link New: This issue links to "PR 34 (Web Link)" [ 15239 ]
          Jesse Glick made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]
          Jesse Glick made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: In Review [ 10005 ] New: Resolved [ 5 ]
          Jesse Glick made changes -
          Link New: This issue is blocked by JENKINS-41339 [ JENKINS-41339 ]

            jglick Jesse Glick
            b_dean Ben Dean
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: