[JIRA] (JENKINS-55088) Jenkins Home config.xml reset upon restart

41 views
Skip to first unread message

wand3r3r@gmail.com (JIRA)

unread,
Dec 7, 2018, 4:29:03 PM12/7/18
to jenkinsc...@googlegroups.com
Michael Schneider created an issue
 
Jenkins / Bug JENKINS-55088
Jenkins Home config.xml reset upon restart
Issue Type: Bug Bug
Assignee: Unassigned
Components: core
Created: 2018-12-07 21:28
Environment: Centos 7 -
Labels: jenkins config.xml
Priority: Major Major
Reporter: Michael Schneider

I am using Jenkins 2.141 and am trying to configure the Jenkins oic-auth plugin.  However every time I restart my Jenkins server instance the config.xml file in reset.

I've applied changes through the web interface and by manually updating the config.xml.  If I select "reload from disk" the changes will keep.  However, if I restart the Jenkins using the "<jenkinsurl>/restart"  or via systemd - systemctl restart command the file is reset.

I've also tried changing something simple like setting "<denyAnonymousReadAccess>" to true.

I need this configuration to be persistent.
Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

o.v.nenashev@gmail.com (JIRA)

unread,
Dec 7, 2018, 5:58:01 PM12/7/18
to jenkinsc...@googlegroups.com
Oleg Nenashev commented on Bug JENKINS-55088
 
Re: Jenkins Home config.xml reset upon restart

Could you please provide config samples before and after the restart?

Also, maybe it makes sense to update to the newest LTS (2.150.1) and try it there. I do not recall any related fix though

 

wand3r3r@gmail.com (JIRA)

unread,
Dec 10, 2018, 11:42:02 AM12/10/18
to jenkinsc...@googlegroups.com

Watch Change in <denyAnonymousReadAccess>

Before Service restart:

 

<?xml version='1.1' encoding='UTF-8'?>
<hudson>
 <disabledAdministrativeMonitors>
 <string>hudson.diagnosis.ReverseProxySetupMonitor</string>
 </disabledAdministrativeMonitors>
 <version>2.141</version>
 <installStateName>RUNNING</installStateName>
 <numExecutors>2</numExecutors>
 <mode>NORMAL</mode>
 <useSecurity>true</useSecurity>
 <authorizationStrategy class="hudson.security.FullControlOnceLoggedInAuthorizationStrategy">
    <denyAnonymousReadAccess>true</denyAnonymousReadAccess>
 </authorizationStrategy>
 <securityRealm class="hudson.security.HudsonPrivateSecurityRealm">
 <disableSignup>true</disableSignup>
 <enableCaptcha>false</enableCaptcha>
 </securityRealm>
...

 

After `sudo systemctl restart jenkins`

 

<?xml version='1.1' encoding='UTF-8'?>
<hudson>
 <disabledAdministrativeMonitors>
 <string>hudson.diagnosis.ReverseProxySetupMonitor</string>
 </disabledAdministrativeMonitors>
 <version>2.141</version>
 <installStateName>RUNNING</installStateName>
 <numExecutors>2</numExecutors>
 <mode>NORMAL</mode>
 <useSecurity>true</useSecurity>
 <authorizationStrategy class="hudson.security.FullControlOnceLoggedInAuthorizationStrategy">
     <denyAnonymousReadAccess>false</denyAnonymousReadAccess>
 </authorizationStrategy>
 <securityRealm class="hudson.security.HudsonPrivateSecurityRealm">
 <disableSignup>true</disableSignup>
 <enableCaptcha>false</enableCaptcha>
 </securityRealm>
...

Here is my systemd jenkins.service file:

[Unit]
Description=jenkins service
[Service]
ExecStart=/etc/alternatives/java -Djava.awt.headless=true -Djava.awt.headless=true -Djava.io.tmpdir=/<pathto>/jenkins/tmp -DJENKINS_HOME=/<pathto>/jenkins -jar /usr/lib/jenkins/jenkins.war --logfile=/var/log/jenkins/jenkins.log --webroot=/var/cache/jenkins/war --daemon --httpPort=8080 --httpsPort=8443 --httpsCertificate=/svc/tls_certs/certs/my.jenkins.crt --httpsPrivateKey=/svc/tls_certs/certs/my.jenkins.key --debug=5 --handlerCountMax=100 --handlerCountMaxIdle=20 --prefix=/jenkins
Type=forking
[Install]
WantedBy=multi-user.target

 

 

 

wand3r3r@gmail.com (JIRA)

unread,
Feb 22, 2019, 1:25:01 PM2/22/19
to jenkinsc...@googlegroups.com

I'm still experiencing this issue.

I recently upgraded to 2.165

o.v.nenashev@gmail.com (JIRA)

unread,
Feb 23, 2019, 7:16:02 AM2/23/19
to jenkinsc...@googlegroups.com

config.xml is managed by Atomic change logic in Jenkins, and in some cases obsolete configs may stay in *.bak files and get applied improperly. It may worth investigation.

Michael Schneider could you please check whether there are temporary *.bak files on the disk and which data they contain?

 

 

wand3r3r@gmail.com (JIRA)

unread,
Feb 26, 2019, 11:03:02 AM2/26/19
to jenkinsc...@googlegroups.com

There were many backup files in the plugins directories and a queue.xml.bak file.  Nothing for config.xml  queue.xml.bak contained 

 

    <hudson.model.Queue_-State>
      <counter>XX</counter>
      <items/>
    </hudson.model.Queue_-State>

 

nachosn89@gmail.com (JIRA)

unread,
May 22, 2019, 4:29:03 AM5/22/19
to jenkinsc...@googlegroups.com
Ignacio Suarez edited a comment on Bug JENKINS-55088
I found the same issue in my Jenkins 2.164.3.

I am using this with other Docker containers, and as a workaround I can copy the config.xml and reload/restart in my init script using:
```
 curl -u admin:admin -X POST http://<jenkins>:8080/reload
curl -u admin:admin -X POST http://<jenkins>:8080/safeRestart

 ```

I didn't have this problem in previous versions, so I hope we can find a proper solution.

nachosn89@gmail.com (JIRA)

unread,
May 22, 2019, 4:29:03 AM5/22/19
to jenkinsc...@googlegroups.com

nachosn89@gmail.com (JIRA)

unread,
May 22, 2019, 4:30:01 AM5/22/19
to jenkinsc...@googlegroups.com
Ignacio Suarez edited a comment on Bug JENKINS-55088
I found the same issue in my Jenkins 2.164.3.

I am using this with other Docker containers, and as a workaround I can copy the config.xml and reload/restart in my init script using:
{quote}
```
curl -u admin:admin -X POST http://<jenkins>:8080/reload
curl -u admin:admin -X POST http://<jenkins>:8080/safeRestart
{quote}
```  

I didn't have this problem in previous versions, so I hope we can find a proper solution.

bmathus+ossjira@cloudbees.com (JIRA)

unread,
May 22, 2019, 8:15:02 AM5/22/19
to jenkinsc...@googlegroups.com

Which kind of FS is in use for people having seen this? If this a local one, or a network based one (NFS, EBS, CIFS, etc.).
I feel like this report is still missing enough data to understand what could be the cause, so any additional data is warmly welcome. Thanks

wand3r3r@gmail.com (JIRA)

unread,
May 22, 2019, 4:21:02 PM5/22/19
to jenkinsc...@googlegroups.com

Our team is deploying on EBS.

trivedibrijesh77@gmail.com (JIRA)

unread,
Jun 6, 2019, 8:51:34 PM6/6/19
to jenkinsc...@googlegroups.com

We are having the same issue. Jenkins Version: `2.164.3` and using `google auth`. Every time I restart Jenkins the config.xml is overwritten. Also Jenkins on AWS, EBS backed volume. Michael Schneider did you found any solution or workaround? 

trivedibrijesh77@gmail.com (JIRA)

unread,
Jun 6, 2019, 8:52:01 PM6/6/19
to jenkinsc...@googlegroups.com

vincent.lemaitre@hardis.fr (JIRA)

unread,
Jul 15, 2019, 10:39:03 AM7/15/19
to jenkinsc...@googlegroups.com

I am facing the same issue.

Jenkins_home is mounted on a NFS volume.

After each reboot of the container, the configuration is lost, which is very painful ...

Does someone have a workaround ?

babak.moqimi@gmail.com (JIRA)

unread,
Sep 6, 2019, 10:29:03 AM9/6/19
to jenkinsc...@googlegroups.com

I have the exact issue mentioned above after the upgrade to the lts. Also dockerized jenkins master here.Any one found anything about this so far? 

buswxz@gmail.com (JIRA)

unread,
Sep 17, 2019, 5:49:02 PM9/17/19
to jenkinsc...@googlegroups.com

Same issue as above, running on 2.176.2 and not on docker. Specifically the config data for SAML in <securityRealm><securityRealm/> would go back to using jenkins' own DB after restart but not reload from disk
This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)
Atlassian logo

abhishikth03@gmail.com (JIRA)

unread,
Nov 13, 2019, 9:26:02 PM11/13/19
to jenkinsc...@googlegroups.com

Having the same issue with Jenkins ver. 2.190.2 on Docker.
the config.xml resets to default user that i am setting up with .groovy in init.groovy.d

wand3r3r@gmail.com (JIRA)

unread,
Nov 15, 2019, 11:08:04 AM11/15/19
to jenkinsc...@googlegroups.com

I am still experiencing this problem a year later.  Is there another log file that I can collect that will help provide more information?

wand3r3r@gmail.com (JIRA)

unread,
Nov 15, 2019, 11:34:07 AM11/15/19
to jenkinsc...@googlegroups.com
Michael Schneider edited a comment on Bug JENKINS-55088
I am still experiencing recently iupgrade to 2.199 and expericened this problem a year later issue again .  Is there another Looking through jenkins. log file that I can collect that will help provide more information see the following:

j.util.groovy.GroovyHookScript@execute: Executing <pathtojenkins>/init.groovy.d/basic-security.groovy

This file was instaled as part of the ansible configuration here
[https://github.com/geerlingguy/ansible-role-jenkins/blob/master/templates/basic-security.groovy.j2]

Is this resetting the security realm ?

wand3r3r@gmail.com (JIRA)

unread,
Nov 15, 2019, 11:34:07 AM11/15/19
to jenkinsc...@googlegroups.com
Michael Schneider edited a comment on Bug JENKINS-55088
I recently iupgrade to 2.199 and expericened this issue again.  Looking through jenkins.log I see the following:
 {code:java}
j.util.groovy.GroovyHookScript @ # execute: Executing <pathtojenkins>/init.groovy.d/basic-security.groovy {code}

This file was instaled as part of the ansible configuration here
[https://github.com/geerlingguy/ansible-role-jenkins/blob/master/templates/basic-security.groovy.j2]

Is this resetting the security realm?

DavidRod777@gmail.com (JIRA)

unread,
Mar 4, 2020, 5:04:03 PM3/4/20
to jenkinsc...@googlegroups.com

I'm having the same issue on a dockerized  jenkins-2.204.4 instance. Has this been resolved?

  1. On new jenkins instance, created 2 simple jobs. (test-env, test-job-1)
  2. Created list-view 'VIEW-A"  and added 'test-job-1"
  3. Restarted jenkins: https://jenkins-upgrade.internal.com/

      List-view "VIEW-A" does NOT persist.

config.xml before adding list-view.

<?xml version='1.1' encoding='UTF-8'
?>
<hudson>
  <disabledAdministrativeMonitors/>
  <version>2.204.4</version>
  <installStateName>RUNNING</installStateName>
  <numExecutors>5</numExecutors>
  <mode>NORMAL</mode>
  <useSecurity>true</useSecurity>
  <authorizationStrategy class="hudson.security.GlobalMatrixAuthorizationStrategy">
    <permission>hudson.model.Computer.Connect:DR_DevReports</permission>
    <permission>hudson.model.Hudson.Administer:drodriguez</permission>
    <permission>hudson.model.Item.Build:authenticated</permission>
    <permission>hudson.model.Item.Cancel:authenticated</permission>
    <permission>hudson.model.Item.Discover:authenticated</permission>
    <permission>hudson.model.Item.Read:authenticated</permission>
    <permission>hudson.model.Item.Workspace:authenticated</permission>
    <permission>hudson.model.View.Read:authenticated</permission>
  </authorizationStrategy>
  <securityRealm class="hudson.plugins.active_directory.ActiveDirectorySecurityRealm" plugin="active-d...@2.16">
    <domains>
      <hudson.plugins.active__directory.ActiveDirectoryDomain>
        <name>internal.com</name>
        <servers>200.88.0.1:3268</servers>
        <bindName>DR_Dev...@internal.com</bindName>
        <bindPassword>{AQAAABAAAAAQfgTl66bNCsnIyvIPvzcUMYY2EaWG5PU1c51vR5B5LbU=}</bindPassword>
        <tlsConfiguration>TRUST_ALL_CERTIFICATES</tlsConfiguration>
      </hudson.plugins.active__directory.ActiveDirectoryDomain>
    </domains>
    <startTls>true</startTls>
    <groupLookupStrategy>TOKENGROUPS</groupLookupStrategy>
    <removeIrrelevantGroups>true</removeIrrelevantGroups>
    <cache>
      <size>500</size>
      <ttl>3600</ttl>
    </cache>
  </securityRealm>
  <disableRememberMe>false</disableRememberMe>
  <projectNamingStrategy class="jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy"/>
  <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir>
  <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir>
  <markupFormatter class="hudson.markup.EscapedMarkupFormatter"/>
  <jdks>
    <jdk>
      <name>jdk1.8.0_181</name>
      <home>/data/jenkins_home/tools/jdk1.8.0_181</home>
      <properties/>
    </jdk>
  </jdks>
  <viewsTabBar class="hudson.views.DefaultViewsTabBar"/>
  <myViewsTabBar class="hudson.views.DefaultMyViewsTabBar"/>
  <clouds/>
  <quietPeriod>5</quietPeriod>
  <scmCheckoutRetryCount>0</scmCheckoutRetryCount>
  <views>
    <hudson.model.AllView>
      <owner class="hudson" reference="../../.."/>
      <name>all</name>
      <filterExecutors>false</filterExecutors>
      <filterQueue>false</filterQueue>
      <properties class="hudson.model.View$PropertyList"/>
    </hudson.model.AllView>
  </views>
  <primaryView>all</primaryView>
  <slaveAgentPort>50000</slaveAgentPort>
  <label></label>
  <crumbIssuer class="hudson.security.csrf.DefaultCrumbIssuer">
    <excludeClientIPFromCrumb>true</excludeClientIPFromCrumb>
  </crumbIssuer>
  <nodeProperties/>
  <globalNodeProperties>
    <hudson.slaves.EnvironmentVariablesNodeProperty>
      <envVars serialization="custom">
        <unserializable-parents/>
        <tree-map>
          <default>
            <comparator class="hudson.util.CaseInsensitiveComparator"/>
          </default>
          <int>7</int>
          <string>JAVA_HOME</string>
          <string>/data/jenkins_home/tools/jdk1.8.0_181/</string>
        </tree-map>
      </envVars>
    </hudson.slaves.EnvironmentVariablesNodeProperty>
  </globalNodeProperties>
</hudson>


 
                                                            

                                                        
 
config.xml after adding list-view "VIEW-A"
 
                                                        

                                                            
 
                                                                
<?xml version='1.1' encoding='UTF-8'
?>
<hudson>
  <disabledAdministrativeMonitors/>
  <version>2.204.4</version>
  <installStateName>RUNNING</installStateName>
  <numExecutors>5</numExecutors>
  <mode>NORMAL</mode>
  <useSecurity>true</useSecurity>
  <authorizationStrategy class="hudson.security.GlobalMatrixAuthorizationStrategy">
    <permission>hudson.model.Computer.Connect:DR_DevReports</permission>
    <permission>hudson.model.Hudson.Administer:drodriguez</permission>
    <permission>hudson.model.Item.Build:authenticated</permission>
    <permission>hudson.model.Item.Cancel:authenticated</permission>
    <permission>hudson.model.Item.Discover:authenticated</permission>
    <permission>hudson.model.Item.Read:authenticated</permission>
    <permission>hudson.model.Item.Workspace:authenticated</permission>
    <permission>hudson.model.View.Read:authenticated</permission>
  </authorizationStrategy>
  <securityRealm class="hudson.plugins.active_directory.ActiveDirectorySecurityRealm" plugin="active-d...@2.16">
    <domains>
      <hudson.plugins.active__directory.ActiveDirectoryDomain>
        <name>internal.com</name>
        <servers>200.88.0.1:3268</servers>
        <bindName>DR_Dev...@internal.com</bindName>
        <bindPassword>{AQAAABAAAAAQfgTl66bNCsnIyvIPvzcUMYY2EaWG5PU1c51vR5B5LbU=}</bindPassword>
        <tlsConfiguration>TRUST_ALL_CERTIFICATES</tlsConfiguration>
      </hudson.plugins.active__directory.ActiveDirectoryDomain>
    </domains>
    <startTls>true</startTls>
    <groupLookupStrategy>TOKENGROUPS</groupLookupStrategy>
    <removeIrrelevantGroups>true</removeIrrelevantGroups>
    <cache>
      <size>500</size>
      <ttl>3600</ttl>
    </cache>
  </securityRealm>
  <disableRememberMe>false</disableRememberMe>
  <projectNamingStrategy class="jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy"/>
  <workspaceDir>${ITEM_ROOTDIR}/workspace</workspaceDir>
  <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir>
  <markupFormatter class="hudson.markup.EscapedMarkupFormatter"/>
  <jdks>
    <jdk>
      <name>jdk1.8.0_181</name>
      <home>/data/jenkins_home/tools/jdk1.8.0_181</home>
      <properties/>
    </jdk>
  </jdks>
  <viewsTabBar class="hudson.views.DefaultViewsTabBar"/>
  <myViewsTabBar class="hudson.views.DefaultMyViewsTabBar"/>
  <clouds/>
  <quietPeriod>5</quietPeriod>
  <scmCheckoutRetryCount>0</scmCheckoutRetryCount>
  <views>
    <hudson.model.AllView>
      <owner class="hudson" reference="../../.."/>
      <name>all</name>
      <filterExecutors>false</filterExecutors>
      <filterQueue>false</filterQueue>
      <properties class="hudson.model.View$PropertyList"/>
    </hudson.model.AllView>
    <listView>
      <owner class="hudson" reference="../../.."/>
      <name>VIEW-A</name>
      <filterExecutors>false</filterExecutors>
      <filterQueue>false</filterQueue>
      <properties class="hudson.model.View$PropertyList"/>
      <jobNames>
        <comparator class="hudson.util.CaseInsensitiveComparator"/>
        <string>test-job-1</string>
      </jobNames>
      <jobFilters/>
      <columns>
        <hudson.views.StatusColumn/>
        <hudson.views.WeatherColumn/>
        <hudson.views.JobColumn/>
        <hudson.views.LastSuccessColumn/>
        <hudson.views.LastFailureColumn/>
        <hudson.views.LastDurationColumn/>
        <hudson.views.BuildButtonColumn/>
        <hudson.plugins.favorite.column.FavoriteColumn plugin="favo...@2.3.2"/>
      </columns>
      <recurse>false</recurse>
    </listView>
  </views>
  <primaryView>all</primaryView>
  <slaveAgentPort>50000</slaveAgentPort>
  <label></label>
  <crumbIssuer class="hudson.security.csrf.DefaultCrumbIssuer">
    <excludeClientIPFromCrumb>true</excludeClientIPFromCrumb>
  </crumbIssuer>
  <nodeProperties/>
  <globalNodeProperties>
    <hudson.slaves.EnvironmentVariablesNodeProperty>
      <envVars serialization="custom">
        <unserializable-parents/>
        <tree-map>
          <default>
            <comparator class="hudson.util.CaseInsensitiveComparator"/>
          </default>
          <int>7</int>
          <string>JAVA_HOME</string>
          <string>/data/jenkins_home/tools/jdk1.8.0_181/</string>
        </tree-map>
      </envVars>
    </hudson.slaves.EnvironmentVariablesNodeProperty>
  </globalNodeProperties>
</hudson>

 
                                                            

                                                        
 
 
 
 
 		 
                                                
 
                                            
                                        
 		 
                                

                        
 		 
                
 
                
 
                     
                        
 
                            
                                
 
                                     This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)  
                                     
                                        
 
                                            
                                                
 
                                                     Atlassian logo  
                                                
 
                                            
                                        
 		 
                                
 
                            
                        
 		 
                
 
            
        
   
    


DavidRod777@gmail.com (JIRA)
unread,
Mar 4, 2020, 6:37:03 PM3/4/20
to jenkinsc...@googlegroups.com
 
                                     
                                        
 
                                            
                                                
 
                                                     
Update from the previous comment:
 
Found my issue was due to "configuration-as-code" plugin. The following [JCasC] jenkins.yaml file doesn't get updated with the new 'Listview' when added via the GUI.  So when jenkins is restarted, it reloads the configuration specified in the jenkins.yaml which doesn't have the new Listview.
 
     $JENKINS_HOME/casc_configs/jenkins.yaml 
 
Looks like this is an issue with the "configuration-as-code" plugin.
 		 
                                                
 
                                            
                                        
 		 
                                
DavidRod777@gmail.com (JIRA)
unread,
Mar 16, 2020, 1:34:04 PM3/16/20
to jenkinsc...@googlegroups.com
 
                                     
                                        
 
                                            
                                                
 
                                                     
Jenkins config.xml changes via GUI doesn't persist with configuration-as-code plug in installed. #1304
 https://github.com/jenkinsci/configuration-as-code-plugin/issues/1304#issuecomment-594967455
 
It's designed so that you don't make configuration changes through the GUI.
 Normally you remove permissions for users to make that sort of change,
 and get them to send a pull request to your jenkins.yaml file to get their view added
 
 
 
Issue closed. Changes need to be made through the jenkins.yml file via gitlab/ansible.
 		 
                                                
 
                                            
                                        
 		 
                                
DavidRod777@gmail.com (JIRA)
unread,
Mar 16, 2020, 1:34:05 PM3/16/20
to jenkinsc...@googlegroups.com


     
         
         
         
         
     
    
 
        
 
             
            
                
 
                     
                        
 
                            
                                
 
                                       
                                     David Rodriguez assigned an issue to David Rodriguez  
                                
 
                            
                        
 		 
                
 
                
 
                     
                        
 
                            
                                
 
                                     
                                      
                                
 
                                
 
                                     
                                        
 
                                            

                                        
 		 
                                
 
                                
 
                                     
                                        
 
                                            
                                                
 
                                                    Change By: 
                                                     David Rodriguez  
                                                
 
                                                
 
                                                    Assignee: 
                                                     David Rodriguez  
                                                
 
                                            
                                        
 		 
                                
DavidRod777@gmail.com (JIRA)
unread,
Mar 16, 2020, 1:37:06 PM3/16/20
to jenkinsc...@googlegroups.com


     
         
         
         
         
     
    
 
        
 
             
            
                
 
                     
                        
 
                            
                                
 
                                       
                                     David Rodriguez assigned an issue to Unassigned  
                                
 
                            
                        
 		 
                
DavidRod777@gmail.com (JIRA)
unread,
Mar 16, 2020, 1:37:07 PM3/16/20
to jenkinsc...@googlegroups.com


     
         
         
         
         
     
    
 
        
 
             
            
                
 
                     
                        
 
                            
                                
 
                                       
                                     David Rodriguez updated an issue  
                                
 
                            
                        
 		 
                
 
                
 
                     
                        
 
                            
 
                                     
                                        
 
                                            
                                                
 
                                                    Change By: 
                                                     David Rodriguez  
                                                
 
                                                
 
                                                    Comment:
 
                                                     Update from the previous comment:

Found my issue was due to "configuration-as-code" plugin. The following [JCasC] jenkins.yaml file doesn't get updated with the new 'Listview' when added via the GUI.  So when jenkins is restarted, it reloads the configuration specified in the jenkins.yaml which doesn't have the new Listview.

     $JENKINS_HOME/casc_configs/jenkins.yaml 

Looks like this is an issue with the "configuration-as-code" plugin. 		 
                                                
DavidRod777@gmail.com (JIRA)
unread,
Mar 16, 2020, 1:37:08 PM3/16/20
to jenkinsc...@googlegroups.com

                
 
                     
                        
 
                            
                                
 
                                       
                                     David Rodriguez updated an issue  
                                
 
                            
                        
 		 
                
 
                
 
                                     
                                        
 
                                            
                                                
 
                                                    Change By: 
                                                     David Rodriguez  
                                                
 
                                                
 
                                                    Comment:
 
                                                     Jenkins config.xml changes via GUI doesn't persist with configuration-as-code plug in installed. #1304
[https://github.com/jenkinsci/configuration-as-code-plugin/issues/1304#issuecomment-594967455]

It's designed so that you don't make configuration changes through the GUI.
Normally you remove permissions for users to make that sort of change,
and get them to send a pull request to your jenkins.yaml file to get their view added

 

Issue closed. Changes need to be made through the jenkins.yml file via gitlab/ansible. 		 
                                                
docker@lilo.org (JIRA)
unread,
Apr 24, 2020, 6:17:03 AM4/24/20
to jenkinsc...@googlegroups.com


     
         
         
         
         
     
    
 
        
 
             
            
                
 
                     
                        
 
                            
                                
 
                                       
                                     Ludo Dido commented on Bug JENKINS-55088  
                                
 
                            
                        
 		 
                
 
                
 
                     
                        
 
                            
                                
 
                                     
                                      
                                
 
                                
 
                                     
                                        
 
                                            
                                                
 
                                                      Re: Jenkins Home config.xml reset upon restart   
                                                
 
                                            
                                        
 		 
                                
 
                                
 
                                     
                                        
 
                                            
                                                
 
                                                     
Same for me $JENKINS_HOME/config.xml seems to be reset
 
 
 
I stopped jenkins and change this setting
 <denyAnonymousReadAccess>true</denyAnonymousReadAccess>
  
 
When i restart, this value came back to "false"
 <denyAnonymousReadAccess>false</denyAnonymousReadAccess>
 		 
                                                
 
                                            
                                        
 		 
                                
docker@lilo.org (JIRA)
unread,
Apr 24, 2020, 6:18:02 AM4/24/20
to jenkinsc...@googlegroups.com


     
         
         
         
         
     
    
 
        
 
             
            
                
 
                     
                        
 
                            
                                
 
                                       
                                     Ludo Dido edited a comment on Bug JENKINS-55088  
                                
 
                            
                        
 		 
                
 
                
 
                     
                        
 
                            
 Same for me $JENKINS_HOME/config.xml seems to be reset

 
That's a security issue.

  

I stopped jenkins and change this setting
 
{code:java}
  <denyAnonymousReadAccess>true</denyAnonymousReadAccess> {code} 
   
 
 When i restart, this value came back to "false"
 
{code:java}
  <denyAnonymousReadAccess>false</denyAnonymousReadAccess> {code}
 

 

Don't forget to vote for this issue 		 
                                                
 
                                            
                                        
 		 
                                
javaprime@gmail.com (JIRA)
unread,
Apr 28, 2020, 9:44:04 AM4/28/20
to jenkinsc...@googlegroups.com


     
         
         
         
         
     
    
 
        
 
             
            
                
 
                     
                        
 
                            
                                
 
                                       
                                     Ian M commented on Bug JENKINS-55088  
                                
 
                            
                        
 		 
                
 
                
 
                     
                        
 
                            
 
                                     
                                        
 
                                            
                                                
 
                                                     
I also have this problem with the config file getting overwritten.
 
 
 
I'm using an AWS EC2 instance with a separate EBS volume for JENKINS_HOME that is mounted at startup.
 		 
                                                
 
                                            
                                        
 		 
                                
Reply all
Reply to author
Forward
0 new messages