[Geoserver-devel] Reconfigured git access for most Jenkins job

Hi all,
this morning I’ve found that most of our Jenkins jobs were failing to connect to git, since sometimes yesterday, with this error:

Caused by: hudson.plugins.git.GitException: Command "git fetch --tags --force --progress -- git://[github.com/geotools/geotools.git](http://github.com/geotools/geotools.git) +refs/heads/*:refs/remotes/origin/*" returned status code 128:
stdout: 
stderr: fatal: remote error: 
  The unauthenticated git protocol on port 9418 is no longer supported.
Please see [https://github.blog/2021-09-01-improving-git-protocol-security-github/](https://github.blog/2021-09-01-improving-git-protocol-security-github/) for more information.

	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandIn(CliGitAPIImpl.java:2671)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:2096)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl.access$500(CliGitAPIImpl.java:84)
	at org.jenkinsci.plugins.gitclient.CliGitAPIImpl$1.execute(CliGitAPIImpl.java:618)
	at hudson.plugins.git.GitSCM.fetchFrom(GitSCM.java:999)
	... 11 more

The error points at a blog explaining the issue. Long story short, most jobs were configured like this, with the wrong URL and no authentication:

authbefore.png

Thankfully, fixing the config is not hard:

authafter.png

Notice the column in the URL, where a slash used to stand, and provide credentials to be used for access (both are needed).

The very annoying bit was that… it needed to be done for all jobs!
I went through all GeoTools, GeoWebCache, GeoServer, GeoFence, release jobs and hopefully fixed them.
I hope I did not copy/paste the wrong URL in some projects, but it’s a possibility …, e.g., pasting the GeoTools URL in a GeoServer job… a second pair of eyes would certainly help.

What I left out:

  • CITE jobs, as I’ve found other issues (pointing to the wrong repo) that need to be fixed, escalated this internally in GeoSolutions
  • GeoScript jobs, as they point directly to Jericks account, and that seems wrong (it should be pointing to geoscript no?). There seems to be a redirect from one to the other, but I decided not to mess with it, as I’m not sure what is going on.
  • Other jobs not included in the categories above (however the 2.18.x train of builds got updated).
    The build server has now a very long job queue… guess they all trigger on reconfiguration. Hopefully the server is going to be back to normal within the day…

Cheers
Andrea

···

GeoServer Professional Services from the experts!

Visit http://bit.ly/gs-services-us for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions Group
phone: +39 0584 962313

fax: +39 0584 1660272

mob: +39 333 8128928

https://www.geosolutionsgroup.com/

http://twitter.com/geosolutions_it


Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.

This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail