Unable to complete initial plugin setup for jenkins 2.32.1 LTS - firewall issue?

[Flavio B]

Hello all,

I'm performing the first jenkins setup in a firewalled environment.
In order to be able to reach jenkins update site, I added a rule that allows me to go to http://updates.jenkins-ci.org/ via both http and https.

The first time I start tomcat, jenkins complains it cant retrieve the plugin list (namely default.json file) via http.
I changed the hudson.model.UpdateCenter.xml so that it uses https and this time I could download the default.json file and I see no errors in catalina log file.

Once the jenkins site is loaded (I mean http://localhost:8080/jenkins) I can see the page where you can chose to install recommended plugins.
I click on that, and I receive lots of connections errors in catalina log file:

Line 645: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/bouncycastle-api/2.16.0/bouncycastle-api.hpi (redirected to: http://ftp.icm.edu.pl/packages/jenkins/plugins/bouncycastle-api/2.16.0/bouncycastle-api.hpi)

                Line 701: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/cloudbees-folder/5.16/cloudbees-folder.hpi (redirected to: http://jenkins.mirror.isppower.de/plugins/cloudbees-folder/5.16/cloudbees-folder.hpi)

                Line 757: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/structs/1.5/structs.hpi (redirected to: http://ftp.halifax.rwth-aachen.de/jenkins/plugins/structs/1.5/structs.hpi)

                Line 813: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/junit/1.19/junit.hpi (redirected to: http://ftp.halifax.rwth-aachen.de/jenkins/plugins/junit/1.19/junit.hpi)

                Line 869: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/antisamy-markup-formatter/1.5/antisamy-markup-formatter.hpi (redirected to: http://jenkins.mirror.isppower.de/plugins/antisamy-markup-formatter/1.5/antisamy-markup-formatter.hpi)

                Line 925: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/pam-auth/1.3/pam-auth.hpi (redirected to: http://ftp.halifax.rwth-aachen.de/jenkins/plugins/pam-auth/1.3/pam-auth.hpi)

                Line 981: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/windows-slaves/1.2/windows-slaves.hpi (redirected to: http://ftp.halifax.rwth-aachen.de/jenkins/plugins/windows-slaves/1.2/windows-slaves.hpi)

                Line 1037: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/display-url-api/0.5/display-url-api.hpi (redirected to: http://ftp.halifax.rwth-aachen.de/jenkins/plugins/display-url-api/0.5/display-url-api.hpi)

                Line 1093: hudson.util.IOException2: Failed to download from http://updates.jenkins-ci.org/download/plugins/mailer/1.18/mailer.hpi (redirected to: http://ftp.icm.edu.pl/packages/jenkins/plugins/mailer/1.18/mailer.hpi)

 

Why do I get redirected to many different URLs?
How many other firewall rules do I have to create to allow Jenkins to download hpi files flawlessly?
For sure, I can reach http://updates.jenkins-ci.org.

Thanks in advance

[Fritz Elfert]

On 22.01.2017 12:10, Flavio B wrote:
> Hello all,
>
> I'm performing the first jenkins setup in a firewalled environment.
> In order to be able to reach jenkins update site, I added a rule that
> allows me to go to http://updates.jenkins-ci.org/ via both http and https.
>
> The first time I start tomcat, jenkins complains it cant retrieve the
> plugin list (namely default.json file) via http.
> I changed the hudson.model.UpdateCenter.xml so that it uses https and
> this time I could download the default.json file and I see no errors in
> catalina log file.
>
> Once the jenkins site is loaded (I mean http://localhost:8080/jenkins) I
> can see the page where you can chose to install recommended plugins.

[...]

>
> Why do I get redirected to many different URLs?

Because a worldwide set of mirrors exists for load-balance reasons.

> How many other firewall rules do I have to create to allow Jenkins to
> download hpi files flawlessly?

16 (at the moment), according to http://mirrors.jenkins-ci.org/status.html

Of course if you don't want managing these entries all the time, you
always can set a wildcard rule ;-)

-F.E.

[Flavio]

Hi Fritz,

thanks a lot for replying.

Great thanks!
Could you point me to the jenkins URL documentation where this setting
is explained please?
Or, if it is simpler for you, explain on how to do that here please.

In the meantime I continue to look for it.


Thanks so much,

--
Flavio

[Daniel Beck]

> On 22.01.2017, at 13:45, Flavio <fbcy...@gmail.com> wrote:
>
> Could you point me to the jenkins URL documentation where this setting
> is explained please?

No such documentation exists. If you want to use the provided official Jenkins update site, you need to allow HTTP to a possibly evolving set of mirrors, listed at http://mirrors.jenkins-ci.org/status.html

[Flavio]

Ok tranne a lot,

So there's no way to tell Jenkins to use a specific list of mirrors.

Best regards

Flavio

--
You received this message because you are subscribed to a topic in the Google Groups "Jenkins Users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/jenkinsci-users/st0cPF28uSA/unsubscribe.
To unsubscribe from this group and all its topics, send an email to jenkinsci-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/8457AE33-0C4E-441A-83D3-163A54B947BE%40beckweb.net.
For more options, visit https://groups.google.com/d/optout.