This is a Vagrant Environment for a Continuous Integration server using the Jenkins daemon.

This configures Jenkins through CLI/JNLP and Groovy scripts to:

• Enable the simple Logged-in users can do anything Authorization security policy.
• Add a SSH public key to vagrant user account and use it to access the CLI.
  • Except on Windows; there it uses JNLP4/HTTPS to connect to the Jenkins Controller from a Windows Service. Only a Windows Service has the needed permissions to run integration tests that use the WCF net.pipe transport.
• Optionally use LDAP user authentication.
• Add and list users.
• Install and configure plugins.
• Setup GitLab integration (assumes rgl/gitlab-vagrant is already deployed)
• Setup nginx as a Jenkins HTTPS proxy and static file server.
• Create Freestyle project job.
• Create Pipeline job.
• Create Multibranch Pipeline job.
• Add a Ubuntu Linux agent node.
  • With docker and docker compose.
• Add a Podman Ubuntu Linux agent node.
  • With podman and podman compose.
• Add a Windows agent node.
  • With docker and docker compose.
  • With enabled long path support on the OS and chocolatey.
  • With MSYS2 to be able to use the Execute shell build step.
    • See the example-execute-shell-windows job.
• Add a macOS agent node.

NB If you are new to Groovy, be sure to check the Groovy Learn X in Y minutes page.

These are the machines and how they are connected with each other:

Usage

Build and install the Ubuntu 24.04 Base Box.

Build and install the Windows 2022 Base Box.

Build and install the macOS Base Box.

Add the following entry to your /etc/hosts file:

10.10.10.100 jenkins.example.com
10.10.10.103 windows.jenkins.example.com

If you want to use LDAP for user authentication, you have to:

1. have rgl/windows-domain-controller-vagrant up and running at ../windows-domain-controller-vagrant.
2. uncomment the config_authentication='ldap' line inside provision.sh.

Run vagrant up --no-destroy-on-error jenkins to launch the controller. See its output to known how to login at the local Jenkins home page as admin (you can also login with one of the example accounts, e.g. alice.doe and password password).

NB The Jenkins UI uses the browser locale to format the date and time. In Firefox, you can set the UI Language and the preferred languages for displaying pages (tip: to use English with a 24h time format, choose English (Ireland) [en-ie] or English (United Kingdom) [en-gb]).

NB nginx is setup with a self-signed certificate that you have to trust before being able to access the local Jenkins home page.

Run vagrant up --no-destroy-on-error ubuntu to launch the Ubuntu agent.

Run vagrant up --no-destroy-on-error podman-ubuntu to launch the Podman Ubuntu agent.

Run vagrant up --no-destroy-on-error windows to launch the Windows agent.

Run vagrant up --no-destroy-on-error macos to launch the macOS agent. NB you first need to download Xcode_8.1.xip. After provisioning you can delete it, as Xcode_8.1.cpio.xz will take its place as a more efficient way to install Xcode.

Email notifications are sent to a local Mailpit SMTP server running at localhost:1025 and you can browse them at http://jenkins.example.com:8025.

List this repository dependencies (and which have newer versions):

GITHUB_COM_TOKEN='YOUR_GITHUB_PERSONAL_TOKEN' ./renovate.sh

Groovy Snippets

Show Object Properties

def getObjectProperties(obj) {
    def filtered = ['class', 'active']

    properties = obj.metaClass.properties
        .findAll {it.name != 'class' && it.name != 'metaClass'}
        .inject([:]) {acc, e -> acc[e.name] = e.getProperty(obj); acc}

    properties
        .sort {it.key}
        .collect {it}
        .findAll {!filtered.contains(it.key)}
        .join('\n')
}

project = Jenkins.instance.getItem('MailBounceDetector-multibranch-pipeline')
getObjectProperties(project)

Create Api Token

// create an user api token.
// see https://javadoc.jenkins.io/hudson/model/User.html
// see https://javadoc.jenkins.io/jenkins/security/ApiTokenProperty.html
// see https://jenkins.io/doc/book/managing/cli/
import hudson.model.User
import jenkins.security.ApiTokenProperty

u = User.getById('alice.doe', false)
p = u.getProperty(ApiTokenProperty)
t = p.tokenStore.generateNewToken('token-name')
u.save()
println t.plainValue

Reference

• Jenkins Handbook