[JENKINS-41745] Remoting-free CLI - Jenkins Jira

XML

Word

Printable

Details

Type: Story
Status: Resolved (View Workflow)
Priority: Major
Resolution: Fixed
Component/s: cli, core
Labels:
- security

Similar Issues:

Show
Epic Link:
Post-FOSDEM 2017 Hackathon

Description

Proposal

Attachments

Issue Links

depends on

JENKINS-41765 groovy CLI command cannot be used with stdin via SSH

Resolved

is blocked by

JENKINS-43517 CLI requests a passphrase when run in default http mode

Open

JENKINS-21695 IllegalStateException: WRITER masks original exception

Resolved

JENKINS-43666 HTTP full-duplex channel timeout from FullDuplexHttpService.download

Resolved

JENKINS-46659 TimeoutException from Jetty 9 not recoverable

Resolved

is related to

JENKINS-26463 Split CLI out of core

Open

relates to

JENKINS-11560 CLI hangs through reverse proxy with JNLP disabled

Open

JENKINS-7052 SEVERE: I/O error in channel HTTP full-duplex channel

Open

JENKINS-12310 Dangling socket connections to jenkins after using cli jar?

Open

JENKINS-15657 Getting "failed to connect" when using latest Jenkins CLI

Open

JENKINS-16126 CLI Basic authentiation does not work

Open

JENKINS-20333 using jenkins-cli.jar to set the next build number at the end of a job is hanging

Open

JENKINS-20667 cli over internet doesn't work

Open

JENKINS-20709 CLI client hangs

Open

JENKINS-22177 Crash in Jenkins CLI when updating build result

Open

JENKINS-16531 jenkins-cli with apache+ssl fails with 403

Open

JENKINS-18301 Passphrase not prompted for default key files

Open

JENKINS-31194 org.apache.sshd.common.SshException: Already closed

Open

JENKINS-38623 Jenkins 2 cli failes with "java.io.IOException: Unexpected termination of the channel"

Open

JENKINS-40056 CLI fails when JNLP port disabled

Resolved

JENKINS-22346 CLI commands with private key for nonexistent user fail with EOFException from DataInputStream.readBoolean

Resolved

JENKINS-22472 CommandDuringBuild not automatically authenticated

Resolved

JENKINS-12543 CliAuthenticator (username/password) called too late to parse arguments (like job names)

Resolved

JENKINS-27026 Log/notify SSH CLI authentication

Resolved

JENKINS-32488 Misleading message reported by the Help Command when permission is denied.

Open

JENKINS-33595 Disable SSHD by default on new Installations

Resolved

JENKINS-49205 Permit file transfers under non-Remoting-based CLI

Resolved

links to

Formal proposal

jenkins.io PR 802

PR 2795

SECURITY-218 page PR 8

sshd-module PR 10

sshd-module PR 11

support-core PR 110

(1 is related to, 21 relates to, 7 links to)

Activity

Ascending order - Click to sort in descending order

Daniel Beck added a comment - 2017-02-10 17:01

First experiments in https://github.com/daniel-beck/jenkins-ssh-cli to see whether a pure SSH CLI could work.

Daniel Beck added a comment - 2017-02-10 17:01 First experiments in https://github.com/daniel-beck/jenkins-ssh-cli to see whether a pure SSH CLI could work.

Jesse Glick added a comment - 2017-03-10 21:31

Linking any issues I could find that might be related, affected, or obsoleted.

Jesse Glick added a comment - 2017-03-10 21:31 Linking any issues I could find that might be related, affected, or obsoleted.

Jesse Glick added a comment - 2017-03-29 19:07

Tasks not tracked in core PR:

offer a support-core-plugin patch
check acceptance-test-harness

Jesse Glick added a comment - 2017-03-29 19:07 Tasks not tracked in core PR: offer a support-core-plugin patch check acceptance-test-harness

Jesse Glick added a comment - 2017-03-31 22:23 - edited

Also:

update https://github.com/jenkinsci-cert/SECURITY-218 to note that this is now obsolete

Jesse Glick added a comment - 2017-03-31 22:23 - edited Also: update https://github.com/jenkinsci-cert/SECURITY-218 to note that this is now obsolete

SCM/JIRA link daemon added a comment - 2017-04-06 17:21

Code changed in jenkins
User: Steven Christou
Path:
src/main/java/com/cloudbees/jenkins/support/SupportCommand.java
http://jenkins-ci.org/commit/support-core-plugin/9b3442585e6394e0b0f119817d6752a8cf913641
Log:
Merge pull request #110 from jglick/CLI-~~JENKINS-41745~~

~~JENKINS-41745~~ Allow SupportCommand to work without a Remoting channel

Compare: https://github.com/jenkinsci/support-core-plugin/compare/17ac51588ad9...9b3442585e63

SCM/JIRA link daemon added a comment - 2017-04-06 17:21 Code changed in jenkins User: Steven Christou Path: src/main/java/com/cloudbees/jenkins/support/SupportCommand.java http://jenkins-ci.org/commit/support-core-plugin/9b3442585e6394e0b0f119817d6752a8cf913641 Log: Merge pull request #110 from jglick/CLI- JENKINS-41745 JENKINS-41745 Allow SupportCommand to work without a Remoting channel Compare: https://github.com/jenkinsci/support-core-plugin/compare/17ac51588ad9...9b3442585e63

SCM/JIRA link daemon added a comment - 2017-04-08 00:12

Code changed in jenkins
User: Jesse Glick
Path:
cli/pom.xml
cli/src/main/java/hudson/cli/CLI.java
cli/src/main/java/hudson/util/QuotedStringTokenizer.java
cli/src/main/resources/hudson/cli/client/Messages.properties
core/src/main/java/hudson/util/QuotedStringTokenizer.java
test/src/test/groovy/hudson/cli/SetBuildParameterCommandTest.groovy
http://jenkins-ci.org/commit/jenkins/492dbbed10cbf524f01f165e3c50b0ccfe1ea134
Log:
~~JENKINS-41745~~ Make jenkins-cli.jar connect to the SSH port by default.

SCM/JIRA link daemon added a comment - 2017-04-08 00:12 Code changed in jenkins User: Jesse Glick Path: cli/pom.xml cli/src/main/java/hudson/cli/CLI.java cli/src/main/java/hudson/util/QuotedStringTokenizer.java cli/src/main/resources/hudson/cli/client/Messages.properties core/src/main/java/hudson/util/QuotedStringTokenizer.java test/src/test/groovy/hudson/cli/SetBuildParameterCommandTest.groovy http://jenkins-ci.org/commit/jenkins/492dbbed10cbf524f01f165e3c50b0ccfe1ea134 Log: JENKINS-41745 Make jenkins-cli.jar connect to the SSH port by default.

SCM/JIRA link daemon added a comment - 2017-04-08 00:12

Code changed in jenkins
User: Jesse Glick
Path:
test/src/test/java/hudson/cli/CLIActionTest.java
http://jenkins-ci.org/commit/jenkins/c2a5d8512356aca5532be83a5444b2f941e72510
Log:
Establishing baseline behavior of ~~JENKINS-12543~~: no workaround when using Remoting transport other than SSH authentication.
(Verifying that this affects only @Argument in CLICommand, not @CLIMethod.)
With the new HTTP protocol in ~~JENKINS-41745~~, API tokens may be used to set a transport authentication.

SCM/JIRA link daemon added a comment - 2017-04-08 00:12 Code changed in jenkins User: Jesse Glick Path: test/src/test/java/hudson/cli/CLIActionTest.java http://jenkins-ci.org/commit/jenkins/c2a5d8512356aca5532be83a5444b2f941e72510 Log: Establishing baseline behavior of JENKINS-12543 : no workaround when using Remoting transport other than SSH authentication. (Verifying that this affects only @Argument in CLICommand, not @CLIMethod.) With the new HTTP protocol in JENKINS-41745 , API tokens may be used to set a transport authentication.

SCM/JIRA link daemon added a comment - 2017-04-11 08:11

Code changed in jenkins
User: Jesse Glick
Path:
content/doc/book/managing/cli.adoc
http://jenkins-ci.org/commit/jenkins.io/9c8f1c743245095069feb0dc1e7bc70505acb5bb
Log:
~~JENKINS-41745~~ Updating CLI documentation for non-Remoting modes

SCM/JIRA link daemon added a comment - 2017-04-11 08:11 Code changed in jenkins User: Jesse Glick Path: content/doc/book/managing/cli.adoc http://jenkins-ci.org/commit/jenkins.io/9c8f1c743245095069feb0dc1e7bc70505acb5bb Log: JENKINS-41745 Updating CLI documentation for non-Remoting modes

SCM/JIRA link daemon added a comment - 2017-04-11 08:11

Code changed in jenkins
User: Daniel Beck
Path:
content/doc/book/managing/cli.adoc
http://jenkins-ci.org/commit/jenkins.io/b1b7dd91e4243efde4906333c9707696607244f3
Log:
Merge pull request #802 from jglick/patch-1

~~JENKINS-41745~~ Updating CLI documentation for non-Remoting modes

Compare: https://github.com/jenkins-infra/jenkins.io/compare/3359e99eaef7...b1b7dd91e424

SCM/JIRA link daemon added a comment - 2017-04-11 08:11 Code changed in jenkins User: Daniel Beck Path: content/doc/book/managing/cli.adoc http://jenkins-ci.org/commit/jenkins.io/b1b7dd91e4243efde4906333c9707696607244f3 Log: Merge pull request #802 from jglick/patch-1 JENKINS-41745 Updating CLI documentation for non-Remoting modes Compare: https://github.com/jenkins-infra/jenkins.io/compare/3359e99eaef7...b1b7dd91e424

Daniel Beck added a comment - 2017-04-11 20:54

Whoever brought up this issue on the changelog community feedback, please file a new issue and link it. Thanks!

Daniel Beck added a comment - 2017-04-11 20:54 Whoever brought up this issue on the changelog community feedback, please file a new issue and link it. Thanks!

SCM/JIRA link daemon added a comment - 2017-04-26 18:39

Code changed in jenkins
User: Jesse Glick
Path:
cli/pom.xml
cli/src/main/java/hudson/cli/CLI.java
cli/src/main/java/hudson/cli/CLIConnectionFactory.java
cli/src/main/java/hudson/cli/CliEntryPoint.java
cli/src/main/java/hudson/cli/CliPort.java
cli/src/main/java/hudson/cli/Connection.java
cli/src/main/java/hudson/cli/DiagnosedStreamCorruptionException.java
cli/src/main/java/hudson/cli/FlightRecorderInputStream.java
cli/src/main/java/hudson/cli/FullDuplexHttpStream.java
cli/src/main/java/hudson/cli/HexDump.java
cli/src/main/java/hudson/cli/PlainCLIProtocol.java
cli/src/main/java/hudson/cli/SSHCLI.java
cli/src/main/java/hudson/cli/SequenceOutputStream.java
cli/src/main/java/hudson/util/QuotedStringTokenizer.java
cli/src/main/resources/hudson/cli/client/Messages.properties
cli/src/test/java/hudson/cli/PlainCLIProtocolTest.java
cli/src/test/java/hudson/cli/PrivateKeyProviderTest.java
core/pom.xml
core/src/main/java/hudson/cli/CLIAction.java
core/src/main/java/hudson/cli/CLICommand.java
core/src/main/java/hudson/cli/CliManagerImpl.java
core/src/main/java/hudson/cli/CliProtocol.java
core/src/main/java/hudson/cli/CliProtocol2.java
core/src/main/java/hudson/cli/CliTransportAuthenticator.java
core/src/main/java/hudson/cli/ClientAuthenticationCache.java
core/src/main/java/hudson/cli/CommandDuringBuild.java
core/src/main/java/hudson/cli/ConsoleCommand.java
core/src/main/java/hudson/cli/HelpCommand.java
core/src/main/java/hudson/cli/InstallPluginCommand.java
core/src/main/java/hudson/cli/InstallToolCommand.java
core/src/main/java/hudson/cli/LoginCommand.java
core/src/main/java/hudson/cli/LogoutCommand.java
core/src/main/java/hudson/cli/SetBuildParameterCommand.java
core/src/main/java/hudson/cli/SetBuildResultCommand.java
core/src/main/java/hudson/cli/util/ScriptLoader.java
core/src/main/java/hudson/model/FileParameterDefinition.java
core/src/main/java/hudson/model/FullDuplexHttpChannel.java
core/src/main/java/hudson/model/ParameterDefinition.java
core/src/main/java/hudson/security/AbstractPasswordBasedSecurityRealm.java
core/src/main/java/hudson/security/CliAuthenticator.java
core/src/main/java/hudson/security/SecurityRealm.java
core/src/main/java/hudson/util/QuotedStringTokenizer.java
core/src/main/java/jenkins/CLI.java
core/src/main/java/jenkins/install/SetupWizard.java
core/src/main/java/jenkins/util/FullDuplexHttpService.java
core/src/main/resources/hudson/cli/Messages.properties
core/src/main/resources/jenkins/CLI/WarnWhenEnabled/message.jelly
core/src/main/resources/jenkins/CLI/WarnWhenEnabled/message.properties
core/src/main/resources/jenkins/CLI/config.jelly
core/src/main/resources/jenkins/CLI/help-enabled.html
pom.xml
test/pom.xml
test/src/test/groovy/hudson/cli/SetBuildParameterCommandTest.groovy
test/src/test/java/hudson/cli/BuildCommand2Test.java
test/src/test/java/hudson/cli/CLIActionTest.java
test/src/test/java/hudson/cli/CLITest.java
test/src/test/java/hudson/cli/GetJobCommandTest.java
test/src/test/java/hudson/cli/InstallPluginCommandTest.java
test/src/test/java/hudson/model/ComputerSetTest.java
test/src/test/java/hudson/model/listeners/ItemListenerTest.java
test/src/test/java/hudson/security/CliAuthenticationTest.java
test/src/test/java/jenkins/CLITest.java
test/src/test/java/jenkins/security/Security218BlackBoxTest.java
test/src/test/java/jenkins/security/Security218CliTest.java
test/src/test/java/jenkins/security/Security232Test.java
test/src/test/resources/hudson/cli/id_rsa
test/src/test/resources/hudson/cli/id_rsa.pub
war/pom.xml
war/src/main/webapp/help/parameter/file.html
http://jenkins-ci.org/commit/jenkins/de629fc0a0d6b96b0d3ca89c59e8416f64afc4d7
Log:
[FIXED JENKINS-41745] Merged #2795: non-Remoting-based CLI.

(cherry picked from commit 729016989e13632bc980957d05060510efddf41f)

SCM/JIRA link daemon added a comment - 2017-04-26 18:39 Code changed in jenkins User: Jesse Glick Path: cli/pom.xml cli/src/main/java/hudson/cli/CLI.java cli/src/main/java/hudson/cli/CLIConnectionFactory.java cli/src/main/java/hudson/cli/CliEntryPoint.java cli/src/main/java/hudson/cli/CliPort.java cli/src/main/java/hudson/cli/Connection.java cli/src/main/java/hudson/cli/DiagnosedStreamCorruptionException.java cli/src/main/java/hudson/cli/FlightRecorderInputStream.java cli/src/main/java/hudson/cli/FullDuplexHttpStream.java cli/src/main/java/hudson/cli/HexDump.java cli/src/main/java/hudson/cli/PlainCLIProtocol.java cli/src/main/java/hudson/cli/SSHCLI.java cli/src/main/java/hudson/cli/SequenceOutputStream.java cli/src/main/java/hudson/util/QuotedStringTokenizer.java cli/src/main/resources/hudson/cli/client/Messages.properties cli/src/test/java/hudson/cli/PlainCLIProtocolTest.java cli/src/test/java/hudson/cli/PrivateKeyProviderTest.java core/pom.xml core/src/main/java/hudson/cli/CLIAction.java core/src/main/java/hudson/cli/CLICommand.java core/src/main/java/hudson/cli/CliManagerImpl.java core/src/main/java/hudson/cli/CliProtocol.java core/src/main/java/hudson/cli/CliProtocol2.java core/src/main/java/hudson/cli/CliTransportAuthenticator.java core/src/main/java/hudson/cli/ClientAuthenticationCache.java core/src/main/java/hudson/cli/CommandDuringBuild.java core/src/main/java/hudson/cli/ConsoleCommand.java core/src/main/java/hudson/cli/HelpCommand.java core/src/main/java/hudson/cli/InstallPluginCommand.java core/src/main/java/hudson/cli/InstallToolCommand.java core/src/main/java/hudson/cli/LoginCommand.java core/src/main/java/hudson/cli/LogoutCommand.java core/src/main/java/hudson/cli/SetBuildParameterCommand.java core/src/main/java/hudson/cli/SetBuildResultCommand.java core/src/main/java/hudson/cli/util/ScriptLoader.java core/src/main/java/hudson/model/FileParameterDefinition.java core/src/main/java/hudson/model/FullDuplexHttpChannel.java core/src/main/java/hudson/model/ParameterDefinition.java core/src/main/java/hudson/security/AbstractPasswordBasedSecurityRealm.java core/src/main/java/hudson/security/CliAuthenticator.java core/src/main/java/hudson/security/SecurityRealm.java core/src/main/java/hudson/util/QuotedStringTokenizer.java core/src/main/java/jenkins/CLI.java core/src/main/java/jenkins/install/SetupWizard.java core/src/main/java/jenkins/util/FullDuplexHttpService.java core/src/main/resources/hudson/cli/Messages.properties core/src/main/resources/jenkins/CLI/WarnWhenEnabled/message.jelly core/src/main/resources/jenkins/CLI/WarnWhenEnabled/message.properties core/src/main/resources/jenkins/CLI/config.jelly core/src/main/resources/jenkins/CLI/help-enabled.html pom.xml test/pom.xml test/src/test/groovy/hudson/cli/SetBuildParameterCommandTest.groovy test/src/test/java/hudson/cli/BuildCommand2Test.java test/src/test/java/hudson/cli/CLIActionTest.java test/src/test/java/hudson/cli/CLITest.java test/src/test/java/hudson/cli/GetJobCommandTest.java test/src/test/java/hudson/cli/InstallPluginCommandTest.java test/src/test/java/hudson/model/ComputerSetTest.java test/src/test/java/hudson/model/listeners/ItemListenerTest.java test/src/test/java/hudson/security/CliAuthenticationTest.java test/src/test/java/jenkins/CLITest.java test/src/test/java/jenkins/security/Security218BlackBoxTest.java test/src/test/java/jenkins/security/Security218CliTest.java test/src/test/java/jenkins/security/Security232Test.java test/src/test/resources/hudson/cli/id_rsa test/src/test/resources/hudson/cli/id_rsa.pub war/pom.xml war/src/main/webapp/help/parameter/file.html http://jenkins-ci.org/commit/jenkins/de629fc0a0d6b96b0d3ca89c59e8416f64afc4d7 Log: [FIXED JENKINS-41745] Merged #2795: non-Remoting-based CLI. (cherry picked from commit 729016989e13632bc980957d05060510efddf41f)

People

Assignee:: Jesse Glick

Reporter:: Daniel Beck

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Dates

Created:: 2017-02-06 08:52

Updated:: 2018-01-26 17:25

Resolved:: 2017-04-08 00:13