[JIRA] (JENKINS-57123) Script Security Plugins latests version caused Jenkins 2.173 failed to start

2 views
Skip to first unread message

dimas.rizky.hp@gmail.com (JIRA)

unread,
Apr 19, 2019, 4:12:03 PM4/19/19
to jenkinsc...@googlegroups.com
Dimas Rizky created an issue
 
Jenkins / Bug JENKINS-57123
Script Security Plugins latests version caused Jenkins 2.173 failed to start
Issue Type: Bug Bug
Assignee: Andrew Bayer
Components: script-security-plugin
Created: 2019-04-19 20:11
Environment: Jenkins Version : 2.173
Script Security Plugins Version : 1.58
Priority: Major Major
Reporter: Dimas Rizky

I updating my jenkins from 2.32.2 to 2.173, after many tries of removing/adding .jpi files inside plugins file, I already come to conclusion that the script-security plugins causing this error because when I removing these plugins, the jenkins is able too boot but with lots of missing dependency error due to script-security is not present

 

java.lang.IllegalArgumentException: Unable to inject class hudson.model.UserIdMapper
 at hudson.init.TaskMethodFinder.lookUp(TaskMethodFinder.java:125)
 at hudson.init.TaskMethodFinder.invoke(TaskMethodFinder.java:105)
 at hudson.init.TaskMethodFinder$TaskImpl.run(TaskMethodFinder.java:175)
 at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:296)
 at jenkins.model.Jenkins$5.runTask(Jenkins.java:1096)
 at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:214)
 at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117)
 at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
 at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
 at java.lang.Thread.run(Thread.java:748)
Caused: org.jvnet.hudson.reactor.ReactorException
 at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:282)
 at jenkins.InitReactorRunner.run(InitReactorRunner.java:48)
 at jenkins.model.Jenkins.executeReactor(Jenkins.java:1130)
 at jenkins.model.Jenkins.<init>(Jenkins.java:932)
 at hudson.model.Hudson.<init>(Hudson.java:85)
 at hudson.model.Hudson.<init>(Hudson.java:81)
 at hudson.WebAppMain$3.run(WebAppMain.java:233)
Caused: hudson.util.HudsonFailedToLoad
 at hudson.WebAppMain$3.run(WebAppMain.java:250)

 

I really hope that you guys can help me in this, thank.

 

I honestly didn't know wether the other plugins that caused this or it's purely from script-security that caused this, in some case, I'll give my list of plugins that need script-security to be able to ran

 

 

 

Dependency errors: Some plugins could not be loaded due to unsatisfied dependencies. Fix these issues and restart Jenkins to restore the functionality provided by these plugins.

Command Agent Launcher Plugin version 1.3
  script-security version 1.36 is missing. To fix, install version 1.36 or later.

JUnit Plugin version 1.27
  script-security version 1.30 is missing. To fix, install version 1.30 or later.

CloudBees AWS Credentials Plugin version 1.26
  script-security version 1.53 is missing. To fix, install version 1.53 or later.

Pipeline: Supporting APIs version 2.20
  script-security version 1.39 is missing. To fix, install version 1.39 or later.

Downstream dependency errors:

GitHub Pipeline for Blue Ocean version 1.0.0-b15
   Pipeline REST API for Blue Ocean version 1.0.0-b15 failed to load. Fix this plugin first.

Git Pipeline for Blue Ocean version 1.0.0-b15
  Pipeline REST API for Blue Ocean version 1.0.0-b15 failed to load. Fix this plugin first.

Pipeline version 2.5
  Pipeline: Input Step version 2.9 failed to load. Fix this plugin first.

Config API for Blue Ocean version 1.0.0-b15
  REST Implementation for Blue Ocean version 1.0.0-b15 failed to load. Fix this plugin first.

Pipeline: Build Step version 2.7
  Pipeline: Supporting APIs version 2.20 failed to load. Fix this plugin first.

Pipeline: Stage View Plugin version 2.10
  Pipeline: REST API Plugin version 2.10 failed to load. Fix this plugin first.

Pipeline: Declarative version 1.3.3.1
  Pipeline: Shared Groovy Libraries version 2.13 failed to load. Fix this plugin first.

GitHub Branch Source Plugin version 1.10.1
  GitHub plugin version 1.29.4 failed to load. Fix this plugin first.

Pipeline REST API for Blue Ocean version 1.0.0-b15
  REST Implementation for Blue Ocean version 1.0.0-b15 failed to load. Fix this plugin first.

Matrix Project Plugin version 1.14
  JUnit Plugin version 1.27 failed to load. Fix this plugin first.

Pipeline: Multibranch version 2.20
  Pipeline: Groovy version 2.57.3 failed to load. Fix this plugin first.

Maven Integration plugin version 3.2
  JUnit Plugin version 1.27 failed to load. Fix this plugin first.

Git plugin version 3.9.3
  Matrix Project Plugin version 1.14 failed to load. Fix this plugin first.

Pipeline: Nodes and Processes version 2.22
  Pipeline: Supporting APIs version 2.20 failed to load. Fix this plugin first.

Build Blocker Plugin version 1.7.3
  Matrix Project Plugin version 1.14 failed to load. Fix this plugin first.

Prometheus metrics plugin version 1.1.1
  JUnit Plugin version 1.27 failed to load. Fix this plugin first.

Autofavorite for Blue Ocean version 1.2.3
  Pipeline: Job version 2.25 failed to load. Fix this plugin first.

Pipeline: Job version 2.25
  Pipeline: Supporting APIs version 2.20 failed to load. Fix this plugin first.

Rebuilder version 1.30
  Matrix Project Plugin version 1.14 failed to load. Fix this plugin first.

Pipeline: Declarative Extension Points API version 1.3.3.1
  Pipeline: Groovy version 2.57.3 failed to load. Fix this plugin first.

GitHub plugin version 1.29.4
  Jenkins Git plugin version 3.9.3 failed to load. Fix this plugin first.

Pipeline Graph Analysis Plugin version 1.9
  Pipeline: Groovy version 2.57.3 failed to load. Fix this plugin first.

Parameterized Trigger plugin version 2.35.2
  Conditional BuildStep version 1.3.6 failed to load. Fix this plugin first.

CloudBees AWS Credentials Plugin version 1.26
  Pipeline: Declarative Extension Points API version 1.3.3.1 failed to load. Fix this plugin first.

Pipeline: Shared Groovy Libraries version 2.13
  Pipeline: Groovy version 2.57.3 failed to load. Fix this plugin first.

Pipeline: Groovy version 2.57.3
  Pipeline: Supporting APIs version 2.20 failed to load. Fix this plugin first.

Personalization for Blue Ocean version 1.0.0-b15
  Events API for Blue Ocean version 1.0.0-b15 failed to load. Fix this plugin first.

Blue Ocean beta version 1.0.0-b15
  Dashboard for Blue Ocean version 1.0.0-b15 failed to load. Fix this plugin first.

GitHub Organization Folder Plugin version 1.5
  Pipeline: Groovy version 2.57.3 failed to load. Fix this plugin first.

Pipeline: REST API Plugin version 2.10
  Pipeline: Job version 2.25 failed to load. Fix this plugin first.

Conditional BuildStep version 1.3.6
  Maven Integration plugin version 3.2 failed to load. Fix this plugin first.

Environment Injector Plugin version 2.1.6
  Matrix Project Plugin version 1.14 failed to load. Fix this plugin first.

Display URL for Blue Ocean version 2.2.0
  Pipeline: Job version 2.25 failed to load. Fix this plugin first.

REST Implementation for Blue Ocean version 1.0.0-b15
  Favorite version 2.3.2 failed to load. Fix this plugin first.

Events API for Blue Ocean version 1.0.0-b15
  Pipeline REST API for Blue Ocean version 1.0.0-b15 failed to load. Fix this plugin first.

Build Pipeline Plugin version 1.5.8
  Jenkins Parameterized Trigger plugin version 2.35.2 failed to load. Fix this plugin first.

Multijob plugin version 1.32
  Maven Integration plugin version 3.2 failed to load. Fix this plugin first.

Pipeline: Input Step version 2.9
  Pipeline: Supporting APIs version 2.20 failed to load. Fix this plugin first.

Pipeline: Declarative Agent API version 1.1.1
  Pipeline: Declarative Extension Points API version 1.3.3.1 failed to load. Fix this plugin first.

Favorite version 2.3.2
  Matrix Project Plugin version 1.14 failed to load. Fix this plugin first.

Dashboard for Blue Ocean version 1.0.0-b15
  Events API for Blue Ocean version 1.0.0-b15 failed to load. Fix this plugin first.

 

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

dimas.rizky.hp@gmail.com (JIRA)

unread,
Apr 19, 2019, 4:22:02 PM4/19/19
to jenkinsc...@googlegroups.com
Dimas Rizky commented on Bug JENKINS-57123
 
Re: Script Security Plugins latests version caused Jenkins 2.173 failed to start

Update, I just installed the security-plugins v1.53 and it runs well, I think this is a bug then, any thoughts ?

andrew.bayer@gmail.com (JIRA)

unread,
Apr 19, 2019, 4:27:02 PM4/19/19
to jenkinsc...@googlegroups.com

andrew.bayer@gmail.com (JIRA)

unread,
Apr 19, 2019, 4:29:01 PM4/19/19
to jenkinsc...@googlegroups.com

fwiw, it worked fine for me with script-security 1.58 (just released yesterday) and core 2.150.3 - lemme try with 2.173.

andrew.bayer@gmail.com (JIRA)

unread,
Apr 19, 2019, 4:31:02 PM4/19/19
to jenkinsc...@googlegroups.com

Worked fine there too. Can you attach your full startup log from when it failed?

dimas.rizky.hp@gmail.com (JIRA)

unread,
Apr 19, 2019, 5:00:03 PM4/19/19
to jenkinsc...@googlegroups.com

Update, Andrew Bayer I try to brute forcing my way to try one plugins at a time, and turns out that the one that caused those error is `matrix-project`.

 

It is not triggered before because `matrix-project` v 1.14 (the one that I update) is needing higher version of `security-script` that's why the `matrix-project` is not loaded thus not causing an error. Yet, if I supply the correct version of `script-security` the `matrix-project` runs and causing a fail to jenkins

 

I have a hypothesis why does this happened

  1. My configuration is obsolete, and somehow there's some change from my previous version to the latest version of `matrix-project`
  2. There''s simply a bug to `matrix-project`

 

would you help me with this please ? In the mean time, I'll try to installing the older version of `matrix-project` and see what I get, I'll update it here

dimas.rizky.hp@gmail.com (JIRA)

unread,
Apr 19, 2019, 5:00:03 PM4/19/19
to jenkinsc...@googlegroups.com

dimas.rizky.hp@gmail.com (JIRA)

unread,
Apr 19, 2019, 5:06:02 PM4/19/19
to jenkinsc...@googlegroups.com
 
Re: Script Security Plugins latests version caused Jenkins 2.173 failed to start

and yep, positively, it's probably depreciation issue with my configuration, I install `matrix-project` v 1.6 works for me. And I really sorry for bothering you with all my question andrew, so sorry

regs@akom.net (JIRA)

unread,
Jun 25, 2019, 3:50:03 PM6/25/19
to jenkinsc...@googlegroups.com

I had the same issue when I upgraded only some (not all) plugins while runing Jenkins 2.174. My plugins were all 3-5 months old.

  1. I then installed the kubernetes plugin, which pulled in some dependencies (some pipeline, etc). The log shows that the upgrade failed (see attached), but Jenkins UI happily restarted on completion.
  2. Jenkins would not start (error in this ticket)
  3. I restored plugins, Jenkins started
  4. I then upgraded all plugins, Jenkins started fine.
    upgrade-log.txt

regs@akom.net (JIRA)

unread,
Jun 25, 2019, 3:50:03 PM6/25/19
to jenkinsc...@googlegroups.com

regs@akom.net (JIRA)

unread,
Jun 25, 2019, 3:51:02 PM6/25/19
to jenkinsc...@googlegroups.com
Alexander Komarov edited a comment on Bug JENKINS-57123
I had the same issue when I upgraded only some (not all) plugins while runing Jenkins 2.174.  My plugins were all 3-5 months old.   

# I then installed the *kubernetes* plugin, which * pulled in some dependencies * (some pipeline, etc).  The log shows that the upgrade failed (see attached), but Jenkins UI happily restarted on completion.
# Jenkins would not start (error in this ticket)
# I restored plugins, Jenkins started
# I then upgraded all plugins, Jenkins started fine.
[^upgrade-log.txt]

wl2776@gmail.com (JIRA)

unread,
Sep 16, 2019, 7:04:02 AM9/16/19
to jenkinsc...@googlegroups.com

Same situation here. 

Jenkins version 2.176.3

After routine plugin update Jenkins has started crashing on startup and showing exception, similar to one, provided in the bug description.

I've searched for the errors and have found this bug report.

Tried removing script-security plugin, and Jenkins has started.

Then, I've tried installing script-security plugin version 1.64 and crashes appeared again.

 

This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)
Atlassian logo

wl2776@gmail.com (JIRA)

unread,
Sep 16, 2019, 7:11:01 AM9/16/19
to jenkinsc...@googlegroups.com
Vladimir Eremeev edited a comment on Bug JENKINS-57123
Same situation here. 

Jenkins version 2.176.3

Script Security plugin version 1.64

 

After routine plugin update Jenkins has started crashing on startup and showing exception, similar to one, provided in the bug description.

 

I've searched for the errors and have found this bug report.

 

Tried removing script-security plugin, and Jenkins has started.

Then, I've tried installing script-security plugin version 1.64 and crashes appeared again.

 

wl2776@gmail.com (JIRA)

unread,
Sep 16, 2019, 7:40:03 AM9/16/19
to jenkinsc...@googlegroups.com
Vladimir Eremeev edited a comment on Bug JENKINS-57123
Same situation here. 

Jenkins version 2.176.3

Script Security plugin version 1.64

 

After routine plugin update Jenkins has started crashing on startup and showing exception, similar to one, provided in the bug description.

 

I've searched for the errors and have found this bug report.

 

Tried removing script-security plugin, and Jenkins has started.

Then, I've tried installing script-security plugin version 1.64 and crashes appeared again.

 


Update.

Actually, crashes were caused by Active-choice plugin. It was recently updated from 2.1 to 2.2

 

I've found this by rolling back script-security plugin. All versions from 1.64 back to 1.50 have caused crash.

caz.san@gmail.com (JIRA)

unread,
Sep 16, 2019, 8:24:03 AM9/16/19
to jenkinsc...@googlegroups.com

Same issue here.

As Vladimir Eremeev said, rollbacking uno-choices to 2.1 made the script-securtiy (v1.64) working and the whole jenkins to work back again.

wl2776@gmail.com (JIRA)

unread,
Sep 16, 2019, 8:31:02 AM9/16/19
to jenkinsc...@googlegroups.com

brendan.hatton@gmail.com (JIRA)

unread,
Sep 16, 2019, 9:30:02 PM9/16/19
to jenkinsc...@googlegroups.com

I encountered a similar issue after updating the script-security plugin. For me the problem was related to the OWASP family of plugins (dependency-check, dependency-track, formatter).

The way I solved it was to

  1. Disabled the script-security plugin to allow jenkins to start
  2. install two additional plugins which were complaining in the logs - Active Choices and Static Analysis Utilities

This was a big pain for us

 

wl2776@gmail.com (JIRA)

unread,
Sep 17, 2019, 2:06:03 AM9/17/19
to jenkinsc...@googlegroups.com
Vladimir Eremeev edited a comment on Bug JENKINS-57123
Same situation here. 

Jenkins version 2.176.3

Script Security plugin version 1.64

 

After routine plugin update Jenkins has started crashing on startup and showing exception, similar to one, provided in the bug description.

 

I've searched for the errors and have found this bug report.

 

Tried removing script-security plugin, and Jenkins has started.

Then, I've tried installing script-security plugin version 1.64 and crashes appeared again.

 

Update.

Actually, crashes were caused by Active-choice plugin. It was recently updated from 2.1 to 2.2

 

I've found this by rolling back script-security plugin. All versions from 1.64 back to 1.50 have caused crash. That suggested that the cause was somewhere else.

efimov.ay.work@gmail.com (JIRA)

unread,
Mar 4, 2020, 6:09:03 AM3/4/20
to jenkinsc...@googlegroups.com
Alex E commented on Bug JENKINS-57123

Found that the actual error is in `depgraph-view` plugin starting from version 1.0.0

Exception is:

2020-03-04 09:19:43.498+0000 [id=30]    WARNING hudson.ExtensionFinder$Sezpoz#_find: Failed to load com.barchart.jenkins.cascade.GraphProjectActionFatoryjava.lang.ClassNotFoundException: hudson.plugins.depgraph_view.DependencyGraphProjectActionFactory        at jenkins.util.AntClassLoader.findClassInComponents(AntClassLoader.java:1383)        at jenkins.util.AntClassLoader.findClass(AntClassLoader.java:1336)        at jenkins.util.AntClassLoader.loadClass(AntClassLoader.java:1083)        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)Caused: java.lang.NoClassDefFoundError: hudson/plugins/depgraph_view/DependencyGraphProjectActionFactory        at java.lang.ClassLoader.defineClass1(Native Method)        at java.lang.ClassLoader.defineClass(ClassLoader.java:763)        at jenkins.util.AntClassLoader.defineClassFromData(AntClassLoader.java:1149)        at hudson.ClassicPluginStrategy$AntClassLoader2.defineClassFromData(ClassicPluginStrategy.java:712)        at jenkins.util.AntClassLoader.getClassFromStream(AntClassLoader.java:1320)        at jenkins.util.AntClassLoader.findClassInComponents(AntClassLoader.java:1373)        at jenkins.util.AntClassLoader.findClass(AntClassLoader.java:1336)        at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)        at java.lang.reflect.Method.invoke(Method.java:498)        at jenkins.ClassLoaderReflectionToolkit.invoke(ClassLoaderReflectionToolkit.java:44)        at jenkins.ClassLoaderReflectionToolkit._findClass(ClassLoaderReflectionToolkit.java:81)        at hudson.PluginManager$UberClassLoader.findClass(PluginManager.java:2040)        at java.lang.ClassLoader.loadClass(ClassLoader.java:424)        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)        at net.java.sezpoz.IndexItem.element(IndexItem.java:134)Caused: java.lang.InstantiationException        at net.java.sezpoz.IndexItem.element(IndexItem.java:146)        at hudson.ExtensionFinder.getClassFromIndex(ExtensionFinder.java:741)        at hudson.ExtensionFinder.access$900(ExtensionFinder.java:89)        at hudson.ExtensionFinder$Sezpoz._find(ExtensionFinder.java:701)        at hudson.ExtensionFinder$Sezpoz.find(ExtensionFinder.java:690)        at hudson.ExtensionFinder$GuiceFinder.refreshExtensionAnnotations(ExtensionFinder.java:302)        at hudson.ExtensionFinder$GuiceFinder.<init>(ExtensionFinder.java:264)        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)        at java.lang.reflect.Constructor.newInstance(Constructor.java:423)        at java.lang.Class.newInstance(Class.java:442)
......
This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)
Atlassian logo

efimov.ay.work@gmail.com (JIRA)

unread,
Mar 4, 2020, 6:11:04 AM3/4/20
to jenkinsc...@googlegroups.com
Alex E edited a comment on Bug JENKINS-57123
Found that the actual error is in `depgraph-view` plugin starting from version 1.0.0

Exception is:
{code:java}

2020-03-04 09:19:43.498+0000 [id=30]    WARNING hudson.ExtensionFinder$Sezpoz#_find: Failed to load com.barchart.jenkins.cascade.GraphProjectActionFatoryjava.lang.ClassNotFoundException: hudson.plugins.depgraph_view.DependencyGraphProjectActionFactory        at jenkins.util.AntClassLoader.findClassInComponents(AntClassLoader.java:1383)        at jenkins.util.AntClassLoader.findClass(AntClassLoader.java:1336)        at jenkins.util.AntClassLoader.loadClass(AntClassLoader.java:1083)        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)Caused: java.lang.NoClassDefFoundError: hudson/plugins/depgraph_view/DependencyGraphProjectActionFactory        at java.lang.ClassLoader.defineClass1(Native Method)        at java.lang.ClassLoader.defineClass(ClassLoader.java:763)        at jenkins.util.AntClassLoader.defineClassFromData(AntClassLoader.java:1149)        at hudson.ClassicPluginStrategy$AntClassLoader2.defineClassFromData(ClassicPluginStrategy.java:712)        at jenkins.util.AntClassLoader.getClassFromStream(AntClassLoader.java:1320)        at jenkins.util.AntClassLoader.findClassInComponents(AntClassLoader.java:1373)        at jenkins.util.AntClassLoader.findClass(AntClassLoader.java:1336)        at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)        at java.lang.reflect.Method.invoke(Method.java:498)        at jenkins.ClassLoaderReflectionToolkit.invoke(ClassLoaderReflectionToolkit.java:44)        at jenkins.ClassLoaderReflectionToolkit._findClass(ClassLoaderReflectionToolkit.java:81)        at hudson.PluginManager$UberClassLoader.findClass(PluginManager.java:2040)        at java.lang.ClassLoader.loadClass(ClassLoader.java:424)        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)        at net.java.sezpoz.IndexItem.element(IndexItem.java:134)Caused: java.lang.InstantiationException        at net.java.sezpoz.IndexItem.element(IndexItem.java:146)        at hudson.ExtensionFinder.getClassFromIndex(ExtensionFinder.java:741)        at hudson.ExtensionFinder.access$900(ExtensionFinder.java:89)        at hudson.ExtensionFinder$Sezpoz._find(ExtensionFinder.java:701)        at hudson.ExtensionFinder$Sezpoz.find(ExtensionFinder.java:690)        at hudson.ExtensionFinder$GuiceFinder.refreshExtensionAnnotations(ExtensionFinder.java:302)        at hudson.ExtensionFinder$GuiceFinder.<init>(ExtensionFinder.java:264)        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)        at java.lang.reflect.Constructor.newInstance(Constructor.java:423)        at java.lang.Class.newInstance(Class.java:442)
......{code}

EDIT:
Looks like it's Maven cascade release plugin issue (according to [this issue|https://github.com/jenkinsci/depgraph-view-plugin/issues/23])
Reply all
Reply to author
Forward
0 new messages