Skip to content

Add JENKINS_LOW_SECURITY_DOMAIN feature. #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: 2.x
Choose a base branch
from
Open

Add JENKINS_LOW_SECURITY_DOMAIN feature. #4

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
de5d1e0
Add JENKINS_LOW_SECURITY_DOMAIN feature.
Mar 31, 2017
dbaf2e5
send ssh-leyscan output to /dev/null
febbraro Mar 31, 2017
ffba682
Remove keyscan in favor of ssh config only.
Apr 26, 2017
2252b1e
Drive all host key checking with new environment variable.
Apr 26, 2017
4a78d0f
Ensure that the .ssh directory exists for the root user
tekante Jul 9, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -93,6 +93,12 @@ configurations offered by this image.
You can pass this as an environment variable to container and it will customize the `admin`
user password. If this is not set, the `admin` user will have a blank password.

### JENKINS_LOW_SECURITY_DOMAIN

Specify a domain, such as `example.com`, which should have a "lower-security" treatment that
does not require user input when the Jenkins container connects to the domain via SSH.

This is intended for use in conjunction with git-based platform-as-a-service providers.

## Customization

Expand Down
6 changes: 6 additions & 0 deletions root/etc/confd/conf.d/ssh-config.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
[template]
src="ssh_config.tmpl"
dest="/root/.ssh/config"
keys=[
"/",
]
8 changes: 8 additions & 0 deletions root/etc/confd/templates/ssh_config.tmpl
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
Host bitbucket.org
StrictHostKeyChecking no
Host github.com
StrictHostKeyChecking no
{{if getenv "JENKINS_LOW_SECURITY_DOMAIN"}}
Host {{getenv "JENKINS_LOW_SECURITY_DOMAIN"}}
StrictHostKeyChecking no
{{end}}
8 changes: 5 additions & 3 deletions root/etc/cont-init.d/20-outrigger-private-key
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,9 @@
KEY_BASE=/root/.ssh
KEY_FILE=$KEY_BASE/outrigger.key

if [ -e $KEY_FILE ]; then

if [ -e $KEY_FILE ] && [ ! -d $KEY_FILE ]
Copy link
Member

@febbraro febbraro Mar 31, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why would that be a directory?

Copy link
Member

@tekante tekante Apr 7, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If you mount a non existent file on your host with a volume mount an empty directory shows up on both sides.

then
echo "KEY_FILE found. Setting up key..."

else

echo "##############################################################"
Expand Down Expand Up @@ -38,3 +37,6 @@ chmod 600 $PRIVATE_KEY
# Make sure that commands don't need to prompt for host keys
ssh-keyscan -H bitbucket.org >> $KEY_BASE/known_hosts
ssh-keyscan -H github.com >> $KEY_BASE/known_hosts
if [[ "$JENKINS_LOW_SECURITY_DOMAIN" ]]; then
ssh-keyscan -H $JENKINS_LOW_SECURITY_DOMAIN >> $KEY_BASE/known_hosts
fi
4 changes: 0 additions & 4 deletions root/root/.ssh/config
View file
Open in desktop

This file was deleted.