I recently did a setup of Jenkins that had to access git repositories via https on a server that only had a self signed certificate. Here are the bits and pieces that I had to configure.
Ignoring SSL warnings in git
Since all git traffic was internal I chose not to bother too much about this isssue and just disable http certificate checks in git. If you run the command
git config --global http.sslVerify true
an entry like this will be added to your
[http] sslVerify = false
We’ll have to put this
.gitconfig in a couple of places to enable Jenkins accessing the git server.
Certain operations are performed on the master itself, e.g. scanning the repo for branches in multibranch pipelines. The
.gitconfig mentioned above must be placed into
/var/jenkins_home/.gitconfig on the master. In my case this was a Docker setup so I mounted the file into the container.
Before the first build step of a pipeline actually runs Jenkins does a git checkout on the worker node. Even if you choose to run your build inside a Docker container the checkout happens before the container is actually started. So the user running the Jenkins agent must be configured with the
.gitconfig mentioned above, too.
Not covered here
I’m sure there are other places where a git checkout happens in Jenkins, e.g. if you do a checkout as part of a pipeline using the
checkout() function in a Jenkinsfile. Since I don’t use that functionality right now I did not bother to go into details here.
Quick templating with gmaven and GStringTemplateEngine
Creating a plain Eclipse project using JPMS and JUnit tests
Kotlin multiline strings vs the $ character
Generating test coverage for Sonar with maven, surefire and jacoco
Filtering spam mails with bogofilter
I’m running a Postfix server here at home to process incoming mail. To integrate spam filtering I’m delivering mails via procmail - it’s as simple as setting
mailbox_command = /usr/bin/procmail in postfix’
Spam filtering works by invoking the filter (bogofilter in my case) from procmail …read more
Deploying files with maven-deploy-plugin
We recently had an outage of our Nexus instance at work. The file system went corrupt, nexus would not start up properly complaining about a corrupted Orient DB.
The blob store was largely left intact. In hindsight I should have tried to rebuild the OrientDB from the blob store using …read more
Fixing the dreaded “problem with defaults entries” in debian
Quite unrelatedly my boss kept nagging me about incoming emails to root that looked like this
Subject: *** SECURITY information for <host> *** <host> : Sep 29 05:45 …