[JIRA] (JENKINS-58468) Unable to checkout git repo from agents

[ghs1@3ds.com (JIRA)]

g hs1 created an issue

Jenkins / JENKINS-58468 Unable to checkout git repo from agents Issue Type: Bug Assignee: Mark Waite Components: git-plugin Created: 2019-07-12 12:43 Environment: Jenkins ver. 2.162 Git plugin 3/10.0 RHEL7 git versions 1.8 and 2.16 tried Priority: Minor Reporter: g hs1 We are unable to get any agent to check out a repo from git (GitLab in our case). We have configured the certs and verified that both the jenkins user and the user in the credential we use to access GitLab can check out locally on the agent. When we run a build which checks out using that same credential on the same agent, the fetch fails with Peer's Certificate issuer is not recognized. We have also configured the Jenkins master with the certs and that can check out from a build run on the master without problems. As soon as we attempt to run on an agent, we hit the same issue. We have sslVerify=false set for all users. The cert is self-signed. It seems somehow that the authentication isn't crossing the master-agent boundary. Since git is the default RCS for Jenkins and so widely used we might be missing something but we're at a loss to know how to proceed.  Thanks.   Add Comment

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

[mark.earl.waite@gmail.com (JIRA)]

Mark Waite updated JENKINS-58468

Jenkins / JENKINS-58468 Unable to checkout git repo from agents

Change By: Mark Waite Status: Fixed but Unreleased Closed

Add Comment

[mark.earl.waite@gmail.com (JIRA)]

Mark Waite updated JENKINS-58468

Please don't use bug reports to request help with configuration issues. Git plugin bug reports are reviewed by very few people. They are the same people that spend their time maintaining the plugin, investigating bug reports, and fixing those bugs. There are many more people that monitor the Jenkins user mailing list and the Jenkins chat channels. You're much more likely to receive help from that larger group of people than from the much smaller group that watches Jenkins bug reports. In your specific case, there are some alternatives you might try, including: Use Let's Encrypt to apply a certificate to your git server HTTP end point Purchase a certificate for your git server HTTP end point Enable JGit on your Jenkins server and clone with JGit instead of command line git Use ssh instead of https to clone the repository Refer to the "how to disable ssl certificate validation" on stackoverflow Refer to the "Git with Jenkins fails with self-signed certificate error" article on stackoverflow

Jenkins / JENKINS-58468 Unable to checkout git repo from agents

Change By: Mark Waite Status: Open Fixed but Unreleased Resolution: Not A Defect

Add Comment

[ghs1@3ds.com (JIRA)]

g hs1 commented on JENKINS-58468

Re: Unable to checkout git repo from agents Firstly, as stated, I have taken most of those actions and I don't actually know if there is a bug here. It's hard to imagine what else is going wrong, given the situation described. I did try and look at your mailing lists but they require logins to Google, which I don't want to deal with, before I can even see the archive. Thanks for the suggestions, though.

Add Comment