Joshua Hoblitt jhoblitt

When you cancel a Jenkins job

Unfinished draft; do not use until this notice is removed.

We were seeing some unexpected behavior in the processes that Jenkins launches when the Jenkins user clicks "cancel" on their job. Unexpected behaviors like:

apparently stale lockfiles and pidfiles
overlapping processes
jobs apparently ending without performing cleanup tasks
jobs continuing to run after being reported "aborted"

This uses terraform's template_file resource to generate a yaml properties file for serverspec to use.

create the Rakefile in your terraform project root
create a spec directory and put spec_helper.rb in it
create the templates/properties.tmpl.yml file
create the serverspec.tf
terraform apply

tests

Tests will be matched based on roles defined for a given node.

Experimental Docker Libnetwork DHCP Driver

The DHCP driver is intended for users to be able to integrate Docker IP address management with their existing IPAM strategies that use DHCP for dynamic address assignment. DHCP enables users to allocate addresses in an organized fashion that will prevent overlapping IP address assignment by associating a unique MAC address from the container eth0 Ethernet interface to an IP address as determined by the DHCP pools defined in the DHCP configuration.

This driver only provides the DHCP client functionality. It does not include a DHCP server. The default driver offers single-host IPAM or for distributed multi-host orchestrated IPAM see the libnetwork overlay driver.

Getting Started

Download the driver compiled into Docker Engine - docker binary with libnetwork test dhcp client spam driver

Introduction

Did you know that you can have multiple helm tillers running in a cluster?
This may actually be useful to us for both security as well as isolating what our cluster ops team does from what our customers can do.

Background

Current Helm Access Control

Helm security is such that "If you can talk to tiller, you can use that tiller" To be able to contact tiller, one needs to be able to create a pod in the namespace tiller resides in. Otherwise you will get an error message like:

	#/usr/bin/env ruby

	# Sends events to hipchat for wonderful chatty notifications
	#
	# This extension requires the hipchat gem
	#
	# The reason I wrote this instead of using the normal hipchat handler, is that with Flapjack
	# all events are handled unless you do crazy filtering stuff. Also with a large number of events
	# and checks the sensu server can get overloaded with forking stuff. So anyway, hipchat extension :)
	#

	new BaseJobBuilder(
	name: "operations-jira-restart",
	description: "Restarts dev jira. To be used when Jira is not responding",
	emails: ["[email protected]", "[email protected]"]
	).build(this).with {
	scm {
	git("https://[redacted]/SoftwareDevelopment/operations-jenkins-automation.git", "master")
	}
	steps {
	shell("fab restart_jira")

	If you are trying to decide between this and the MySQL version, this is better.
	I've tried to document what I learned setting up pwm-1.8.0-SNAPSHOT-2016-10-26T09:44:11Z-pwm-bundle.zip from https://github.com/pwm-project/pwm, an LDAP self-service java webapp on Oracle Linux 6. RHEL or CentOS should work exactly the same.
	My lastest attempt as of 2/22/17, worked on Oracle Linux 7 (should work exatly the same on CentOS 7 or RHEL 7) _updating to_ the file pwm-1.8.0-SNAPSHOT-2017-02-19T20:34:49Z-pwm-bundle.zip from https://github.com/pwm-project/pwm

	For the impatient:
	DONT RUN TOMCAT UNMODIFIED on your FreeIPA server. FreeIPA uses its own Tomcat.
	Install java 7, tomcat 7 from binaries at the Apache website (don't use distro's packages), and deploy the pwm.war file.
	Adjust your firewall to open TCP 8080, if using default Tomcat settings.
	The guided configuration wizard doesn't work because you have to adjust the unique ID attribute name, use manual configuration.
	Choose OpenLDAP for the configuration type.

	// A Declarative Pipeline is defined within a 'pipeline' block.
	pipeline {

	// agent defines where the pipeline will run.
	agent {
	// This also could have been 'agent any' - that has the same meaning.
	label ""
	// Other possible built-in agent types are 'agent none', for not running the
	// top-level on any agent (which results in you needing to specify agents on
	// each stage and do explicit checkouts of scm in those stages), 'docker',

	#!/usr/bin/env python3
	"""
	License: MIT License
	Copyright (c) 2023 Miel Donkers

	Very simple HTTP server in python for logging requests
	Usage::
	./server.py [<port>]
	"""
	from http.server import BaseHTTPRequestHandler, HTTPServer

	# make sure crypt module in use
	sudo modprobe dm-crypt

	# Find out which drive it was with the following command:
	sudo fdisk -l

	# You must mount /dev/sda3 myvolume
	# use cryptsetup, device is accessible under /dev/mapper/myvolume
	sudo cryptsetup luksOpen /dev/sde3 myvolume