Update center + firewall rules

[Daniel Becroft]

Hi,

We need to add some explicit rules into our new firewall to allow Jenkins to download updates for core and plugins.

Can anyone advise what these rules would cover? Is everything available via jenkins-ci.org, or can things be redirected to sourceforge or similar?

Regards,
---
Daniel Becroft

[Christopher Orr]

On 26/09/11 04:53, Daniel Becroft wrote:
> We need to add some explicit rules into our new firewall to allow
> Jenkins to download updates for core and plugins.
>
> Can anyone advise what these rules would cover? Is everything available

> via jenkins-ci.org <http://jenkins-ci.org>, or can things be redirected
> to sourceforge or similar?

You first need access to updates.jenkins-ci.org -- requesting update
data or downloads from there will redirect to mirrors.jenkins-ci.org,
which will in turn redirect to the most appropriate mirror host.

I believe everything by default runs over port 80.

Regards,
Chris

[Daniel Becroft]

Thanks, Chris. I assume then that the chosen mirror could be anywhere (and in any domain). I don't suppose there is any way to force jenkins to use a particular mirror - this redirection would all happen on the web server?

Cheers,

Daniel B.

[Christopher Orr]

On 26/09/2011 22:13, Daniel Becroft wrote:
> On Mon, Sep 26, 2011 at 8:52 PM, Christopher Orr <ch...@orr.me.uk
> <mailto:ch...@orr.me.uk>> wrote:
>
> On 26/09/11 04:53, Daniel Becroft wrote:
>
> We need to add some explicit rules into our new firewall to allow
> Jenkins to download updates for core and plugins.
>
> Can anyone advise what these rules would cover? Is everything
> available
> via jenkins-ci.org <http://jenkins-ci.org>
> <http://jenkins-ci.org>, or can things be redirected
> to sourceforge or similar?
>
>
> You first need access to updates.jenkins-ci.org

> <http://updates.jenkins-ci.org> -- requesting update data or

> downloads from there will redirect to mirrors.jenkins-ci.org

> <http://mirrors.jenkins-ci.org>, which will in turn redirect to the

> most appropriate mirror host.
>
> I believe everything by default runs over port 80.
>
>
> Thanks, Chris. I assume then that the chosen mirror could be anywhere
> (and in any domain). I don't suppose there is any way to force jenkins
> to use a particular mirror - this redirection would all happen on the
> web server?

Correct. The mirror hostnames are listed here, but of course there's no
guarantee that mirrors won't be added or removed at any time:
http://mirrors.jenkins-ci.org/status.html

The redirection is done on the web server, based on your geographic
location and maybe some other factors. So I don't know of a way to
override this -- as the Donation page on the wiki demonstrates, we like
serving files from mirrors as much as possible :)

Regards,
Chris

[Les Mikesell]

On Mon, Sep 26, 2011 at 5:33 PM, Christopher Orr <ch...@orr.me.uk> wrote:
>
> The redirection is done on the web server, based on your geographic location
> and maybe some other factors.  So I don't know of a way to override this --
> as the Donation page on the wiki demonstrates, we like serving files from
> mirrors as much as possible :)
>

Is there a way to make your own local mirror, and point the updates to
that for cases where your working server doesn't have direct access?

--
Les Mikesell
lesmi...@gmail.com

[Fabi]

We are trying todo this, but we have many problems. Is there a howto?

2011/9/27 Les Mikesell <lesmi...@gmail.com>

[Christopher Orr]

You could set up a caching HTTP proxy somewhere on your network, which
does have internet access, and then point Jenkins to that proxy.

On 06/10/11 22:03, Fabi wrote:
> We are trying todo this, but we have many problems. Is there a howto?
>
> 2011/9/27 Les Mikesell <lesmi...@gmail.com

> <mailto:lesmi...@gmail.com>>

>
> On Mon, Sep 26, 2011 at 5:33 PM, Christopher Orr <ch...@orr.me.uk
> <mailto:ch...@orr.me.uk>> wrote:
> >
> > The redirection is done on the web server, based on your
> geographic location
> > and maybe some other factors. So I don't know of a way to
> override this --
> > as the Donation page on the wiki demonstrates, we like serving
> files from
> > mirrors as much as possible :)
> >
>
> Is there a way to make your own local mirror, and point the updates to
> that for cases where your working server doesn't have direct access?
>
> --
> Les Mikesell

> lesmi...@gmail.com <mailto:lesmi...@gmail.com>
>
>

[Fabi]

I want to know how we can setup and own update-center2. We already tried to get https://github.com/jenkinsci/backend-update-center2 running, but had no access.

Why isn't there any description howto provide an own update center, simply via retrieving plugins via a standard maven proxy, e.g nexus or artifactory.

2011/10/7 Christopher Orr <ch...@orr.me.uk>