Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

In Ubuntu, how do I authenticate to trigger a Jenkins job remotely using the CLI?

emmalee last edited by
As far as I understand, using the Linux CLI, builds can be triggered remotely using the curl command and the following URL syntax:

/job//build?token=

Example:
```
$ curl http://localhost:8080/job/MyJob/build?token=my-token
```
However, when I run the command, I receive the following:
```
Authentication required
```
Is authentication done using the CLI or the Jenkins web interface? How do I authenticate?
Reply Quote 0
1 Reply Last reply
Laycee last edited by
This is covered https://www.jenkins.io/doc/book/system-administration/authenticating-scripted-clients/ . In short, if you are triggering via HTTP, you need to generate an authentication token and use it with HTTP Basic auth, for instance:
```
curl -X POST -L --user your-user-name:apiToken https://jenkins.example.com/job/your_job/build
```
Reply Quote 0
1 Reply Last reply

2
Posts

0
Views

Suggested Topics

E

Re-running a pipeline job if failed
Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline jenkins plugins • • emerson

2

0
Votes

2
Posts

0
Views

A

The simplest way to do this would probably be to add a retry option to the pipeline. See https://www.jenkins.io/doc/book/pipeline/syntax/#options
R

How to revert jenkins Safe restart?
Continuous Integration and Delivery (CI, CD) • jenkins • • Raziyah00

2

0
Votes

2
Posts

1
Views

I assume you talk about jenkins cli? There is no command to abort the safeRestart. Use quiteDown, cancelQuietDown instead and safeRestart only if needed. safeRestart: Puts Jenkins into the quiet mode, wait for existing builds to be completed, and then restart Jenkins quietDown: Put Jenkins in a Quiet mode, in preparation for a restart. In that mode Jenkins don’t start any build cancelQuietDown: Cancel the effect of the “quiet-down” command
K

How to completely password protect login into Ubuntu 12.10?
Security, Penetration Testing • linux authentication • • kalena

2

0
Votes

2
Posts

0
Views

N

Absolutely every operating system works like this. You might not have noticed it with Windows because Windows doesn't come with a rescue or live system, but that's a deficiency of Windows's administration tools. If you plug in a Windows drive on another Windows machine, you'll be able to read and modify the files. This is not under the control of the operating system, so there's no feature that you can disable to change that. You can prevent the computer from booting from rescue media, by restricting boot choices in the BIOS and setting a password (again, in the BIOS, not in the operating system) to change BIOS settings or boot from alternate media, and by disabling or password-protecting access to the boot prompt in the Grub settings. But that won't protect from someone taking the disk out and plugging it into another machine. In your scenario, changing BIOS or Grub settings is useless. If you want to completely prevent access to your data, you have two choices: lock up the computer physically (put it in a locked room or in a safe), or encrypt your data. This goes while the computer is powered off. If you leave the computer powered on, additional attacks are possible, for example by rebooting and accessing data still in RAM (which may include the encryption key). Preventing access to USB ports wouldn't be useful: anyone who can plug something into your laptop's USB port can also take the disk out and plug it into their own machine. “Password protect USB ports” only makes sense within the context of an operating system, but all the attacks we're discussing here are outside the context of the operating system. Ubuntu offers home directory encryption or full-disk encryption. For this use case, home directory encryption is enough: someone could still use your Linux installation but wouldn't be able to access your files. You can select home directory encryption at installation time or afterwards. Full-disk encryption can only be done at installation time, with the alternate CD. Even if your data is encrypted, someone could erase it: they could wipe the disk, but then, they could also throw the disk into a furnace. If this is a concern, lock up the computer in a safe.
E

Forced to use using 2-Step Authentication to keep online profiles safe?
Security, Penetration Testing • authentication passwords attac languageks attac languagek preventio • • emerson

2

0
Votes

2
Posts

0
Views

T

Forced? No. But passwords alone have known weakness. Using 2-factor methods help to mitigate the risks of those weaknesses. That also means that we can't make it a web standard for every login, because there are instances where it does not make sense in terms of mitigating those risks. I suspect that the current 2-factor is a stepping stone to better things. Biometrics and physical tokens can be combined to provide something similar to 2-factor and people are working on making that accessible for the masses.
SSL authentication unexpectedly failing - could this be caused by SSL Inspection/Fortinet?
Security, Penetration Testing • tls authentication certificates certificate authority • • Demir

2

0
Votes

2
Posts

1
Views

The first thing is to communicate with your client: ask if they have a Fortinet appliance that is configured for SSL inspection on purpose. This is the only way to distinguish this from a genuine man-in-the-middle (MITM) attack, as anyone could make a self-signed CA that appears as a Fortinet appliance. After that, you have the following choices, but this should be discussed closely with your client, comparing pros & cons regarding both security and maintainability. Add an exception for your entire server to bypass the transparent HTTPS proxy. While the SSL inspection protects the users inside the organization while they surf freely on the Internet, a server should only make connections to trusted web sites. Add exceptions for the sites the server needs. This is more restrictive: it may add some security, but also needs more maintenance as you might occasionally need to ask for more exceptions. Ask your client for the public CA certificate of the Fortinet appliance and install it to this server's trusted root certificate authorities. This has its risks it the private key for the appliance gets compromised. Also, you need to do this again if the client upgrades or replaces the appliance with another. At that point you must remember to remove the old CA certificate, too. They should know if they are performing SSL inspection, as they must have done the same for all the client computers. In some countries they would also need a consent from their employees.
R

What are ways to structure a webhook-triggered job that triggers a human-triggerable job?
Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline pipeline • • Rossere

2

0
Votes

2
Posts

1
Views

A

Make B as a Pipeline job and give it some build parameters. Humans will be able to trigger this build with whatever parameters they want using the "Build With Parameters" button in the web UI. Then, in your Pipeline script for A, trigger the build using the built-in build step. This will allow job A to trigger B with whatever parameters are necessary: build( job: 'Job B', parameters: [ string(name: 'parameterName1', value: "some parameter value"), string(name: 'parameterName2', value: "some parameter value"), // etc. ], )
O

Why is IF failing with satl state file from Jenkins?
Continuous Integration and Delivery (CI, CD) • salt • • obi

2

0
Votes

2
Posts

1
Views

J

The jinja syntax error is caused by the {{ around your job var. Those curly braces are not required as you are already inside jinja block, noted by the {%. So to get your code working just replace your {{ job }} by job. This should be working.
D

How do I fail a gitlab pipeline job?
Continuous Integration and Delivery (CI, CD) • gitlab cicd pipeline • • Duquan

2

0
Votes

2
Posts

1
Views

All you need to do is to configure the mvn dependency plugin to fail on found vulnerabilities. You can do that with the failBuildOnCVSS config flag. E.g. with severity 8 from docs <project> ... <build> ... <plugins> ... <plugin> <groupId>org.owasp</groupId> <artifactId>dependency-check-maven</artifactId> <version>6.2.2</version> <configuration> <failBuildOnCVSS>8</failBuildOnCVSS> </configuration> <executions> <execution> <goals> <goal>check</goal> </goals> </execution> </executions> </plugin> ... </plugins> ... </build> ... </project> By that the mvn job will fail if vulnerabilities with severity of 8 or higher are found and by that the pipeline will fail too.
B

Devops Jenkins nexus integration?
Continuous Integration and Delivery (CI, CD) • jenkins jenkins plugins nexus devsecops n3dr • • baileigh

2

0
Votes

2
Posts

1
Views

J

No, you don't need maven. Maven is a build automation tool as ant and gradle are, generally, but not limited to, jvm based projects. Nexus is an artifact repository, but some others exists. Artifact repositories software have different set of features (license, different storage options, different repositories type support like gems or npm ..., search support, web interface ...). I know that once a developer pushes a code to git, Jenkins should take it and run the test case on it. If it is success then push it to production? Am I right? I'm not sure about the flow. Generally, in order to achieve continuous deployment, which is what you are asking for precisely here, you would: setup a hook when you commit have a continuous integration tool that receive the hook the CI does whatever needs to be done for the project to be tested / build / runnable the CI deploys the previously built software Jenkins, for example, supports pipeline as code, it would allow you to put a Jenkinsfile in your repository, that would tell Jenkins how to do step 3 and 4 (travis and circleCI and others CI also supports this). You can tell your CI in steps 3 to upload some artifacts to an artifact repository and on step 4, to retrieve them in order to deploy the software, but you don't need to. My advice would be to design your CD system the simplest way you can, don't introduce not necessary parts like an artifact repository if you don't need it, add it when you face a problem that needs it. As a first step, your CI, can during the deployment steps, simply copy your artifacts to the target server.
G

How does winrar know I typed the right key?
Security, Penetration Testing • authentication passwords key generation brute force • • guilherme

2

0
Votes

2
Posts

1
Views

T

WinRAR does not check a password at all. It passes a password through the hash function to set a 128/256 Bit AES encryption key and then uses this key to encrypt the file data valid until RAR 4.x format. The new RAR 5.x format detects wrong passwords even before starting extraction and does not extract garbage. RAR 5.x stores a special password hash generated by one way hash function. Consequently the knowledge of this hash does not allow to know a password of the encryption key. When password is entered RAR compares its hash to stored hash in case of no match it rejects the wrong password early. This one way hash function is intentionally slow and based on PBKDF2, therefore it does not allow to increase the brute force attack performance noticeably. Here is the source.
E

Validate Quality Cobol code - Jenkins, Sonarqube/SonarLint and Rational/Topaz?
Continuous Integration and Delivery (CI, CD) • jenkins continuous integration sonarqube • • emerson

2

0
Votes

2
Posts

1
Views

F

The next step is to create a proof of concept. Setup cobol code repository Create example cobol code to test jenkins/sonarqube features Create cobol unit-tests Setup Jenkins Create job to pull cobol code Run any tests and generate code-coverage Push data to SonarQube Analyze results Manual: Analyze trends and set targets Automated: SonarQube can give feedback/alerts I think the best is to just start trying and see what you run into, this could lead to better less broad questions. Try to setup a (automated) flow / process that uses these tools and see if they give you value.
P

Jenkins Selenium Test on Windows 2012 R2 with Chrome driver
Automated Testing • windows automated testing selenium jenkins • • Pearlaqua

2

0
Votes

2
Posts

1
Views

Z

Problem Solved, we had to run the java & the jenkins-slave.exe (Service) with a specefied user, not as system User.
A

Using Jenkins gitlab token to make an API call
Continuous Integration and Delivery (CI, CD) • jenkins gitlab • • Anderson

2

0
Votes

2
Posts

1
Views

Try something similar to the following: environment { GITLAB_API_TOKEN = credentials('gitlab_api_token'). } or withCredentials([[ $class: 'com.dabsquared.gitlabjenkins.connection.GitLabApiTokenImpl', credentialsId: 'gitlab_api_token', variable: 'GITLAB_API_TOKEN' ]]) See https://jenkins.io/doc/pipeline/steps/credentials-binding/ and https://github.com/jenkinsci/gitlab-plugin/issues/536 for more information.
F

Why using oAuth2 refresh token is more secure then regenerate an access_token?
Security, Penetration Testing • authentication rest oauth oauth2 token • • fbio

2

0
Votes

2
Posts

1
Views

T

It is for user convenience. Having to enter their login credentials too often is annoying to users. Of course, if that is not a concern, you can just not use refres_token, which would improve security somewhat. However, users generally dislike logging in often and forcing them to may cause them to do something insecure, such as storing password in browser or disabling 2FA, hence the use of refres_token.
J

Can a mobile number ring if the person has not inserted their simcard into their phone?
Security, Penetration Testing • authentication • • Jolied

2

0
Votes

2
Posts

0
Views

I don't think this is a security question. But anyway I think your person lied to you. Everyone knows the voice telling something like The person you have called is temporary not available. If a cellphone has no contact to the network or is switched of or the sim is not in the cellphone you get either this message or the mailbox.

In Ubuntu, how do I authenticate to trigger a Jenkins job remotely using the CLI?

Suggested Topics

Re-running a pipeline job if failed Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline jenkins plugins • • emerson

How to revert jenkins Safe restart? Continuous Integration and Delivery (CI, CD) • jenkins • • Raziyah00

How to completely password protect login into Ubuntu 12.10? Security, Penetration Testing • linux authentication • • kalena

Forced to use using 2-Step Authentication to keep online profiles safe? Security, Penetration Testing • authentication passwords attac languageks attac languagek preventio • • emerson

SSL authentication unexpectedly failing - could this be caused by SSL Inspection/Fortinet? Security, Penetration Testing • tls authentication certificates certificate authority • • Demir

What are ways to structure a webhook-triggered job that triggers a human-triggerable job? Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline pipeline • • Rossere

Why is IF failing with satl state file from Jenkins? Continuous Integration and Delivery (CI, CD) • salt • • obi

How do I fail a gitlab pipeline job? Continuous Integration and Delivery (CI, CD) • gitlab cicd pipeline • • Duquan

Devops Jenkins nexus integration? Continuous Integration and Delivery (CI, CD) • jenkins jenkins plugins nexus devsecops n3dr • • baileigh

How does winrar know I typed the right key? Security, Penetration Testing • authentication passwords key generation brute force • • guilherme

Validate Quality Cobol code - Jenkins, Sonarqube/SonarLint and Rational/Topaz? Continuous Integration and Delivery (CI, CD) • jenkins continuous integration sonarqube • • emerson

Jenkins Selenium Test on Windows 2012 R2 with Chrome driver Automated Testing • windows automated testing selenium jenkins • • Pearlaqua

Using Jenkins gitlab token to make an API call Continuous Integration and Delivery (CI, CD) • jenkins gitlab • • Anderson

Why using oAuth2 refresh token is more secure then regenerate an access_token? Security, Penetration Testing • authentication rest oauth oauth2 token • • fbio

Can a mobile number ring if the person has not inserted their simcard into their phone? Security, Penetration Testing • authentication • • Jolied

Re-running a pipeline job if failed
Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline jenkins plugins • • emerson

How to revert jenkins Safe restart?
Continuous Integration and Delivery (CI, CD) • jenkins • • Raziyah00

How to completely password protect login into Ubuntu 12.10?
Security, Penetration Testing • linux authentication • • kalena

Forced to use using 2-Step Authentication to keep online profiles safe?
Security, Penetration Testing • authentication passwords attac languageks attac languagek preventio • • emerson

SSL authentication unexpectedly failing - could this be caused by SSL Inspection/Fortinet?
Security, Penetration Testing • tls authentication certificates certificate authority • • Demir

What are ways to structure a webhook-triggered job that triggers a human-triggerable job?
Continuous Integration and Delivery (CI, CD) • jenkins jenkins pipeline pipeline • • Rossere

Why is IF failing with satl state file from Jenkins?
Continuous Integration and Delivery (CI, CD) • salt • • obi

How do I fail a gitlab pipeline job?
Continuous Integration and Delivery (CI, CD) • gitlab cicd pipeline • • Duquan

Devops Jenkins nexus integration?
Continuous Integration and Delivery (CI, CD) • jenkins jenkins plugins nexus devsecops n3dr • • baileigh

How does winrar know I typed the right key?
Security, Penetration Testing • authentication passwords key generation brute force • • guilherme

Validate Quality Cobol code - Jenkins, Sonarqube/SonarLint and Rational/Topaz?
Continuous Integration and Delivery (CI, CD) • jenkins continuous integration sonarqube • • emerson

Jenkins Selenium Test on Windows 2012 R2 with Chrome driver
Automated Testing • windows automated testing selenium jenkins • • Pearlaqua

Using Jenkins gitlab token to make an API call
Continuous Integration and Delivery (CI, CD) • jenkins gitlab • • Anderson

Why using oAuth2 refresh token is more secure then regenerate an access_token?
Security, Penetration Testing • authentication rest oauth oauth2 token • • fbio

Can a mobile number ring if the person has not inserted their simcard into their phone?
Security, Penetration Testing • authentication • • Jolied