[JIRA] [ssh-slaves-plugin] (JENKINS-22320) High CPU consumption because of SSH communication
Title: Message Title Yves Martin closed an issue as Fixed After upgrade to 1.625.1, SSH slave communication is as efficient as WebStart agent. As a result, I consider this issue as fixed. Thank you for the job. Yves Jenkins / JENKINS-22320 High CPU consumption because of SSH communication Change By: Yves Martin Status: Open Closed Resolution: Fixed Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [ssh-slaves-plugin] (JENKINS-22297) ssh-slave connection seems to have performance issues
Title: Message Title Yves Martin commented on JENKINS-22297 Re: ssh-slave connection seems to have performance issues After upgrade to 1.625.1, SSH slave communication is now as efficient as WebStart agent. As a result, I consider this issue as fixed. Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [sonar] (JENKINS-31211) Jenkins-sonar-plugin throwing errors suddenly
Title: Message Title Yves Martin commented on JENKINS-31211 Re: Jenkins-sonar-plugin throwing errors suddenly Here is the registered issue for sonar-maven-plugin: https://jira.sonarsource.com/browse/MSONAR-131 It should be fixed in next 2.8. Beware that Sonar 3 versions are no longer supported. Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin commented on JENKINS-31192 Re: Subversion HTTPS + PKCS12 Certificate in CPU infinite loop Pending pull request: https://github.com/jenkinsci/subversion-plugin/pull/145 Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin edited a comment on JENKINS-31192 Re: Subversion HTTPS + PKCS12 Certificate in CPU infinite loop Pending pull request: https://github.com/jenkinsci/subversion-plugin/pull/ 145 147 Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin commented on JENKINS-31192 Re: Subversion HTTPS + PKCS12 Certificate in CPU infinite loop My collegue Sylvain Pasche and I have done debugging session in Jenkins and find out that the String.valueOf(certificateFile) _expression_ which returns [B@x prevents the SVNSSLAuthentication object to be compared as equal even when generated from the same certificate entity. As a result, the "getNextAuthentication" method is endlessly invoked in loop, explaining the high CPU symptom. Definitely the issue is in Subversion Plugin only. I have designed and tested a working patch - without any change in SVNKit 1.8 itself, as implemented previously with 1.7.x. I am preparing the pull request. Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title
Yves Martin edited a comment on JENKINS-31192
Re: Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
My collegue Sylvain Pasche and I have done debugging session in Jenkins and find out that the {{String.valueOf(certificateFile)}} _expression_ which returns {{[B@x}} prevents the {{SVNSSLAuthentication}} object to be compared as equal even when generated from the same certificate entity. As a result, the "getNextAuthentication" method is endlessly invoked in loop, explaining the high CPU symptom.Definitely the issue is in Subversion Plugin only. I have designed and tested a working patch - without any change in SVNKit 1.8 itself , (so not as implemented previously with 1.7.x ) . I am preparing the pull request.
Add Comment
This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265)
--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin assigned an issue to Yves Martin Jenkins / JENKINS-31192 Subversion HTTPS + PKCS12 Certificate in CPU infinite loop Change By: Yves Martin Assignee: Yves Martin Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title
Yves Martin edited a comment on JENKINS-31192
Re: Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
After investigation, the issue appears when Subversion plugin has moved to standard SVNKit 1.8.6, where {{SVNSSLAuthentication}} constructor with certificate as {{byte[]}} does not exist. This constructor was probably only available in Jenkins-specific svnkit 1.7 version.http://javadox.com/org.tmatesoft.svnkit/svnkit/1.8.3/org/tmatesoft/svn/core/auth/SVNSSLAuthentication.htmlAs a result , the {{String.valueOf(certificateFile)}} introduced in {{CredentialsSVNAuthenticationProviderImpl.build}} when "porting" to SVNKit 1.8.6 is a big mistake and is not expected to produce any correct certification SSL certificat authentication mechanism.By the way, it is abnormal such an authentication failure leads to infinite authentication loop in plugin. Still investigating, patches should come soon.
Add Comment
This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265)
--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [remoting] (JENKINS-5413) SCM polling getting hung
Title: Message Title Yves Martin commented on JENKINS-5413 Re: SCM polling getting hung When investigating a Subversion SCM polling issue (JENKINS-31192), I find out that there is a global lock hudson.scm.SubversionSCM$ModuleLocation prevents threads to work concurrently. Is that "big lock" really relevant ? Maybe it is possible to reduce the code section when the lock is held. Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title
Yves Martin updated an issue
Jenkins / JENKINS-31192
Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Change By:
Yves Martin
After upgrading to Jenkins 1.625.1 and switching to Java 8u60,one of our job configured to use mutual SSL authentication against a HTTPS Subversion repository produces the following behaviour:- the polling SCM thread consumes 100% in "endless" {{sun.security.pkcs12.PKCS12KeyStore.engineGetKey}} method- because of the lock {{hudson.scm.SubversionSCM$ModuleLocation}} held there, all SCM commit notification gets threads get stuck- as a result, the SCM thread pool gets exhausted and management page displays a warningIn production, everything get stuck for 12 hours before we had to restart Jenkins master.In test environment, we reproduced with both Java 7u80 and Java 8u60.The issue persists even after replacing default "Sun" security provider by "BouncyCastle" to use alternate PKCS#12, SHA and DES implementations.
Add Comment
This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265)
--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin commented on JENKINS-31192 Re: Subversion HTTPS + PKCS12 Certificate in CPU infinite loop Running with -Xint to disable JIT leads to same high CPU consumption and stack trace in thread dump. Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin updated an issue Jenkins / JENKINS-31192 Subversion HTTPS + PKCS12 Certificate in CPU infinite loop Change By: Yves Martin Attachment: thread-scm-https-pkcs12-credentials-loop.log Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [remoting] (JENKINS-5413) SCM polling getting hung
Title: Message Title
Yves Martin edited a comment on JENKINS-5413
Re: SCM polling getting hung
When investigating a Subversion SCM polling issue (JENKINS-31192), I find out that there is a global lock {{hudson.scm.SubversionSCM$ModuleLocation}} prevents threads to work concurrently. Is that "big lock" really relevant ? Maybe it is possible to reduce the code section when the lock is held.
Add Comment
This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265)
--
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin updated an issue Jenkins / JENKINS-31192 Subversion HTTPS + PKCS12 Certificate in CPU infinite loop Change By: Yves Martin Environment: Jenkins LTS 1.625.1, Subversion plugin 2.5.3 (svnkit 1.8.6), Java 8u60, Debian GNU/Linux Jessie 8.2 Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin updated an issue Jenkins / JENKINS-31192 Subversion HTTPS + PKCS12 Certificate in CPU infinite loop Change By: Yves Martin Environment: Jenkins LTS 1.625.1, Subversion plugin Java 8u60, Debian GNU/Linux Jessie 8.2 Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin commented on JENKINS-31192 Re: Subversion HTTPS + PKCS12 Certificate in CPU infinite loop After investigation, the issue appears when Subversion plugin has moved to standard SVNKit 1.8.6, where SVNSSLAuthentication constructor with certificate as byte[] does not exist. This constructor was probably only available in Jenkins-specific svnkit 1.7 version. http://javadox.com/org.tmatesoft.svnkit/svnkit/1.8.3/org/tmatesoft/svn/core/auth/SVNSSLAuthentication.html As a result the String.valueOf(certificateFile) introduced in CredentialsSVNAuthenticationProviderImpl.build when "porting" to SVNKit 1.8.6 is a big mistake and is not expected to produce any correct certification authentication mechanism. By the way, it is abnormal such an authentication failure leads to infinite authentication loop in plugin. Still investigating, patches should come soon. Add Comment This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [subversion-plugin] (JENKINS-31192) Subversion HTTPS + PKCS12 Certificate in CPU infinite loop
Title: Message Title Yves Martin created an issue Jenkins / JENKINS-31192 Subversion HTTPS + PKCS12 Certificate in CPU infinite loop Issue Type: Bug Assignee: Unassigned Attachments: VisualVM_CpuSampling.png, VisualVM_Monitor.png Components: subversion-plugin Created: 27/Oct/15 4:21 PM Environment: Jenkins LTS 1.625.1, Java 8u60, Debian GNU/Linux Jessie 8.2 Labels: performance security scm subversion Priority: Major Reporter: Yves Martin After upgrading to Jenkins 1.625.1 and switching to Java 8u60, one of our job configured to use mutual SSL authentication against a HTTPS Subversion repository produces the following behaviour:
[JIRA] [monitoring] (JENKINS-24838) Monitoring Plugin links from slaves are incorrect when Jenkins deployed with a context
Yves Martin updated JENKINS-24838 Monitoring Plugin links from slaves are incorrect when Jenkins deployed with a context Change By: Yves Martin (24/Sep/14 6:37 AM) Summary: MonitoringPluginlinks fromslaves areincorrectwhenJenkinsdeployedwithacontext Description: The Whenbrowsing Monitoring PluginexpectsJenkinstobedeployedas ROOTwebappwithoutanycontext. section IfJenkinsisdeployedwith for a context,like specificslave http://myhost/jenkins/ ,the computer/SLAVE/ monitoring pluginisunusableas /, links all donottakecareoftheJenkinscontextand pointtohttp://myhost/monitoring/ Pleaseuserelativelinks even when possible Jenkinsisdeployedwithacontext , or likehttp://myhost/jenkins/Please prependtheJenkinswebappcontextwhengeneratinglinks This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [monitoring] (JENKINS-24838) Monitoring Plugin links are incorrect when Jenkins deployed with a context
Yves Martin created JENKINS-24838 Monitoring Plugin links are incorrect when Jenkins deployed with a context Issue Type: Bug Assignee: Unassigned Components: monitoring Created: 24/Sep/14 5:52 AM Description: The Monitoring Plugin expects Jenkins to be deployed as "ROOT" webapp without any context. If Jenkins is deployed with a context, like http://myhost/jenkins/, the monitoring plugin is unusable as links all point to "http://myhost/monitoring/" Please use relative links when possible, or prepend the Jenkins webapp context when generating links Project: Jenkins Priority: Blocker Reporter: Yves Martin This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] [ssh-slaves] (JENKINS-22320) High CPU consumption because of SSH communication
Yves Martin created JENKINS-22320 High CPU consumption because of SSH communication Issue Type: Bug Assignee: Kohsuke Kawaguchi Attachments: Selection_145.png, Selection_146.png Components: ssh-slaves Created: 24/Mar/14 8:41 AM Description: Our Jenkins instance runs 1.553 (since two weeks, was an three year old version before) on Linux with 10 slaves: 6 Linux connected through SSH and 4 windows with WebStart agent started as services. When no job is running, CPU is almost 0. Correct. When only two or three jobs are running, Jenkins CPU raises between 70% to 160%. atop declares 96% of CPU time spent in IRQ (even with "no" disk access), most CPU consumption is considered as system time. On average since boot, the master node consumes 100% of one CPU. Even if it has 4 CPUs, job execution time is between 2x and 3x compared to older version. I configured JMX and did a quick CPU profiling. Top consumer threads are unnamed and are all related to SSH communication "Thread-13" - Thread t@90 java.lang.Thread.State: RUNNABLE at java.net.SocketInputStream.socketRead0(Native Method) at java.net.SocketInputStream.read(SocketInputStream.java:152) at java.net.SocketInputStream.read(SocketInputStream.java:122) at com.trilead.ssh2.crypto.cipher.CipherInputStream.fill_buffer(CipherInputStream.java:41) at com.trilead.ssh2.crypto.cipher.CipherInputStream.internal_read(CipherInputStream.java:52) at com.trilead.ssh2.crypto.cipher.CipherInputStream.getBlock(CipherInputStream.java:79) at com.trilead.ssh2.crypto.cipher.CipherInputStream.read(CipherInputStream.java:108) at com.trilead.ssh2.transport.TransportConnection.receiveMessage(TransportConnection.java:232) at com.trilead.ssh2.transport.TransportManager.receiveLoop(TransportManager.java:682) at com.trilead.ssh2.transport.TransportManager$1.run(TransportManager.java:480) at java.lang.Thread.run(Thread.java:744) So there is chance the "SSH agent plugin" is concerned. I am ready to do deeper analysis on my system if required, and of course to test patches. Project: Jenkins Labels: performance Priority: Critical Reporter: Yves Martin This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators. For more information on JIRA, see: http://www.atlassian.com/software/jira -- You received this message because you are subscribed to the Google Groups Jenkins Issues group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
