1. About jenkins.debian.net

2. Setup

2.1. Installed software that makes jenkins.debian.net run

jenkins.debian.net runs Debian jessie.

2.2. Jenkins

Currently running the long term support .deb from jenkins-ci.org.

Jenkins is installed using deb http://pkg.jenkins-ci.org/debian-stable binary/ into /etc/apt/sources.list.d/jenkins.list and apt-get update && apt-get install jenkins.

We would prefer to run a jenkins package from jessie-backports.

2.2.1. Jenkins plugins

  • Git plugin

  • Subversion Plug-in

  • Email Extension Plugin

  • Log Parser Plugin

  • HTML Publisher plugin

  • Static Analysis Utilities

  • Read-only configurations

  • SCM Sync Configuration Plugin

  • Dependency Graph Viewer Plugin

  • View Job Filters

  • Console Column Plugin

  • Priority Sorter Plugin

  • Throttle Concurrent Builds Plugin

  • Build Blocker Plugin

  • Naginator Plugin

  • Next Executions

  • Parameterized Trigger plugin

  • Environment Injector Plugin

  • build timeout plugin

  • Build Authorization Token Root Plugin

  • Embeddable Build Status Plugin

  • Plot Plugin

  • GitLab Plugin

  • Sidebar Link

  • Green Balls

  • Compact Columns

  • Console Tail Plugin

  • Cron Column Plugin

  • Simple Theme Plugin

  • Live Screenshot

  • Locale plugin

2.3. updating jenkins.debian.net with update_jdn.sh

update_jdn.sh is a hackish script which will install all needed packages, copy their configuration in place, generate the documentation webpages and update all jenkins jobs if needed.

As user run:

git clone https://salsa.debian.org/qa/jenkins.debian.net
cd jenkins.debian.net

vncdotool is the only software which is not installed by packages and is not covered by this script.

2.4. IRC notification configuration using kgb-client

The jenkins jobs are configured to send email to jenkins+$IRC_CHANNEL (like jenkins+debian-qa), this is parsed by a script (/srv/jenkins/bin/email2irc.sh) run through procmail which then in turn notifies kgb-client, which notfies kgb-server(s) on the internet, which are the bots notifying the IRC channels.

The Jenkins EMail notification plugin is used as its state tracking is best (and the Jenkins IRC plugin is way too powerful).

2.5. Installing vncdotool

apt-get install python-twisted python-imaging
git clone https://github.com/sibson/vncdotool
cd vncdotool/
python setup.py install

2.6. adding new agents to jenkins

Process to follow to add a new node to jenkins:

  • Open https://jenkins.debian.net/computer/new

  • Use the FQDN of the new node, and select "Permanent Agent"

  • Configure it as follow:

  • # of executors: the number of CPUs of the new node

  • Remote root directory: /srv/jenkins/pseudo-hosts/$hostname

  • Labels: $arch $short_name (with $short_name like ff64a if the hostname is ff64a-armhf-rb)

  • Usage: select "Only build jobs with label expressions matching this node"

  • Launch method: select "Launch agent via execution of command on the master"

  • Launch command: /srv/jenkins/bin/start-agent.sh

  • Availability: select "Take this agent online when in demand, and offline when idle"

  • In demand delay: 0 (so that builds will start right away)

  • Idle delay: 5 (this is an arbitrary amount of time)

The agent setup is done so that the agent.jar program doesn’t get run on the remote nodes, to avoid needing Java available in there. Jobs wanting to run entirely on a remote host will just execute jenkins_master_wrapper.sh which will do the needed ssh and execute jenkins_node_wrapper.sh on the remote host, which will need to know what to execute after to actually start the wanted program.

2.7. munin

Munin is installed, running with jenkins plugins not yet published elsewhere.

2.8. Using jenkins-job-builder

update_jdn.sh takes care of this too, so this is just a quick run through. Make sure to also look at the upstream documentation at http://ci.openstack.org/jenkins-job-builder/

  • run cd /srv/jenkins/job-cfg ; jenkins-job-builder update . to update jobs

  • for testing: cd /srv/jenkins/job-cfg ; rm test-output/ -r ; mkdir test-output ; jenkins-job-builder test . -o test-output/ ; ls test-output/

2.9. Backup

Currently only the configuration is backed up, but neither the jenkins results nor system logs. But that’s at least sufficient to re-setup the system if needed.

  • The etckeeper package is installed and automatically keeps /etc in /etc/.git.

  • The SCM Sync Configuration Plugin is installed in Jenkins, putting all Jenkins configuration into /srv/jenkins.debian.net-scm-sync.git.

    • (This is not ideal yet, because it also puts the generated job configuration there…)

I’ve cloned these two git repos on my desktop and manually run git pull. This is certainly not ideal but good enough to re-setup the system anytime, which is something.

2.10. Setup of standalone tests.reproducible-builds.org for development

If you’d like to run tests.repoducible-builds.org without the rest of the jenkins set up, here are some necessary steps. Note that most of these steps are performed in the update_jdn.sh script, so if you have a test system it might be simpler to just run it.

Your clone of the jenkins git (https://salsa.debian.org/qa/jenkins.debian.net) will be referred to as $JENKINSGIT.

2.10.1. Dependencies, users, directories and files

Some dependencies:

sudo apt install python3 python3-psycopg2 python3-yaml sqlite3 python-rpy2 dctrl-tools

Create a user jenkins for testing. Create the following directories:

sudo mkdir -p /var/lib/jenkins/userContent/reproducible/ /srv/reproducible-results/ /srv/workspace /schroots /chroots

Create the following symlinks:

ln -s $JENKINSGIT/bin /srv/jenkins/bin/
ln -s $JENKINSGIT/userContent/reproducible/static /var/lib/jenkins/userContent/reproducible/static/

Additional, give user jenkins write access to the root $JENKINSGIT directory and following directory trees:

  • /srv/reproducible-results/…

  • /var/lib/jenkins/…

  • /srv/workspace/…

  • $JENKINSGIT/userContent/…

  • $JENKINSGIT/bin/…

2.10.2. Database

Get a recent copy of the database from:

wget https://tests.reproducible-builds.org/reproducible.sql.xz

The database is kept using PostgreSQL and initialised by running /srv/jenkins/bin/reproducible_db_maintenance.py manually as the jenkins user.

2.10.3. Websites scripts

The $JENKINSGIT/bin/reproducible_html_*.py and $JENKINSGIT/bin/reproducible_html_*.sh scripts produce the debian pages and you probably want to run all of them at least once. Below are the requirements for some scripts.

All webpages will be served out of /var/lib/jenkins/userContent/reproducible and you need to point a webserver to this directory. Build the reproducible dashboard for debian with the $JENKINSGIT/bin/reproducible_html_dashboard.sh, and navigate to <host>/debian/reproducible.html in your browser.

Requirements for $JENKINSGIT/bin/reproducible_html_dashboard.sh

Before running, create the following directories and files:

sudo mkdir /srv/reproducible-results/node-information/
for i in i386 amd64 arm64 armhf ; do touch /srv/reproducible-results/node-information/dummy_$i ; done

And run the following script as user jenkins:


Requirements for $JENKINSGIT/bin/reproducible_html_notes.py

This script construct pages that contain notes about the ongoing status and causes of nondeterminism for a package. These pages can be accessed at <host>/debian/notes/<package>_note.html

First, clone the notes git repo: git clone https://salsa.debian.org/reproducible-builds/reproducible-notes

Create symlinks for the the files packages.yml and issues.yml in your $JENKINSGIT/bin/ directory.