Skip to content

Commit

Permalink
Install permissive-script-security plugin in install-jenkins command
Browse files Browse the repository at this point in the history
* src/commands/command-install-jenkins.lisp (header): updated
  copyright
  (*default-extra-plugins*): added permissive-script-security
* data/jenkins-install/config/common/start_jenkins: added option
  -Dpermissive-script-security.enabled=true to commandline
* changes.sexp (Release 0.35): added enhancement entry

fixes #61
  • Loading branch information
scymtym committed Oct 9, 2023
1 parent ba56b41 commit f574da7
Show file tree
Hide file tree
Showing 3 changed files with 12 additions and 3 deletions.
7 changes: 7 additions & 0 deletions changes.sexp
Original file line number Diff line number Diff line change
@@ -1,5 +1,12 @@
((:release "0.35" nil

(:enhancement
"The Jenkins installation performed by the" (:verb "install-jenkins")
"command now includes the" (:verb "permissive-script-security") "plugin
which circumvents the approval mechanism for Groovy scripts. Please
review the security implications before using a Jenkins installation
created using the" (:verb "install-jenkins") "command.")

(:enhancement
"When a project which uses GIT SCM specifies a sub directory, Jenkins
SCM polling is now configured to ignore repository changes outside
Expand Down
4 changes: 3 additions & 1 deletion data/jenkins-install/config/common/start_jenkins
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,8 @@ if [ ! -f "${keystore}" ] ; then
fi

# Execute the process
exec java -jar "${root}/jenkins.war" \
exec java \
-Dpermissive-script-security.enabled=true \
-jar "${root}/jenkins.war" \
--httpsPort=8080 --httpPort=-1 \
--httpsKeyStore="${keystore}" --httpsKeyStorePassword=keystore
4 changes: 2 additions & 2 deletions src/commands/command-install-jenkins.lisp
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
;;;; command-install-jenkins.lisp --- Install a Jenkins instance.
;;;;
;;;; Copyright (C) 2017-2022 Jan Moringen
;;;; Copyright (C) 2017-2023 Jan Moringen
;;;;
;;;; Author: Jan Moringen <[email protected]>

Expand Down Expand Up @@ -29,7 +29,7 @@
:test #'string=))))

(defparameter *default-extra-plugins*
'("extra-columns"))
'("extra-columns" "permissive-script-security"))

;;; Jenkins installation profiles

Expand Down

0 comments on commit f574da7

Please sign in to comment.