-
Improvement
-
Resolution: Duplicate
-
Major
-
None
Currently the update center needs a client that uses a browser with activated JavaScript (and no blocked sites) to fetch new updates. According to the discussion in the mailing list this seems to be intentional since Jenkins server instances may have no connection to the internet.
However, it is very confusing for a Jenkins administrator, that the updates depend on the clients JavaScript settings and not on the server settings. There should be at least a note or help text on the corresponding update center page.
And since there are a lot of Jenkins instances that can connect to the internet, there should be a fallback that tries to use a direct connection from the server to the update sites.
Isn't a direct connection also used to fetch the tools like maven, jdk, etc.?
- duplicates
-
JENKINS-19081 Download update center from master by default
-
- Resolved
-
- is related to
-
JENKINS-11598 Updating Plugins from plugins mirror and own update-center.json does not work
-
- Resolved
-
Can we revert this to the old behaviour - the jenkins server gets the json - and provide an option for those behind firewalls to enable the browser retrieve?
I do not see why I should allow any site on the internet to run javascript from xmission and osuosl just to enable me to update my Jenkins (or jump through hoops to prevent it)
IMHO any script referenced by Jenkins should be hosted on that instance of Jenkins. (of cource plugins are free to do what the want - I don't have to use them)
I'm not even convinced that a Jenkins instance should be asking the browser to contact jenkins-ci.org either, but that one I can live with.