[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies Or disable them, yes. Really it might be better for Docker image users to have an alternate distribution of jenkins.war without any detached plugins. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.169319.1459117318000.2688.1567085280545%40Atlassian.JIRA.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Michael Düsterhus commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies This change seems to allow now to also uninstall/disable implied plugins. So release 2.176.2 introduced with JENKINS-57528 the change that all implied plugins are also installed, and now I can uninstall them again manually? Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.169319.1459117318000.2573.1567070820710%40Atlassian.JIRA.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Nick Jones commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies In case it's helpful to anyone else (as I've just gone through this to uninstall Mask Passwords due to SECURITY-157), Jesse Glick's workaround disables the optional dependency in question (mask-passwords.jpi in my case), after which point the Uninstall button in the Manage Plugins page will enable, and the plugin can be uninstalled as desired. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.169319.1459117318000.6143.1566309480679%40Atlassian.JIRA.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Oliver Gondža updated an issue Jenkins / JENKINS-33843 It's not possible to disable/uninstall optional dependencies Change By: Oliver Gondža Labels: 2.176.2-rejected lts 2.176.3 - candidate fixed Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.169319.1459117318000.5021.1564657501082%40Atlassian.JIRA.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Oliver Gondža commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies I am postponing backport of this fix to give it some more soaking time. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.169319.1459117318000.12481.1561964402087%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Oliver Gondža updated an issue Jenkins / JENKINS-33843 It's not possible to disable/uninstall optional dependencies Change By: Oliver Gondža Labels: 2.176.2-rejected lts-candidate Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.169319.1459117318000.12460.1561964401142%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick updated JENKINS-33843 Jenkins / JENKINS-33843 It's not possible to disable/uninstall optional dependencies Change By: Jesse Glick Status: In Review Resolved Resolution: Fixed Released As: 2.181 Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.169319.1459117318000.1761.1560777481865%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Daniel Beck commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies Nick Jones Thanks. Looks like I typoed the versions regex, fixed in https://github.com/jenkins-infra/update-center2/pull/273 Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Nick Jones commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies Daniel Beck FWIW, analysis-core 1.96 still shows the security warning:We first saw the warning with 1.95 installed, upgraded, and still see it. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Nick Jones updated an issue Jenkins / JENKINS-33843 It's not possible to disable/uninstall optional dependencies Change By: Nick Jones Attachment: screenshot-1.png Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies Andrei Costescu the fix is still open for review. If and when the fix is merged, this issue will be closed with details. In the meantime, see the *.disabled workaround above. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Daniel Beck commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies Are you sure? analysis-core 1.96 should not have a security warning, we fixed that issue. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Andrei Costescu commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies Great news that this is resolved. Which version will have this fixed? (I see it in Jenkins ver. 2.164.2 where I can't uninstall Static Analysis Utilities 1.96 (which has a security warning and is end-of-life) due to an optional dependency to it from Email Extension Plugin 2.66 which I still use) Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick updated an issue Jenkins / JENKINS-33843 It's not possible to disable/uninstall optional dependencies Change By: Jesse Glick Labels: lts-candidate Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick updated JENKINS-33843 Jenkins / JENKINS-33843 It's not possible to disable/uninstall optional dependencies Change By: Jesse Glick Status: In Progress Review Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies At least some of the confusing overlap is old. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies At least the optionalDependents field was introduced in JENKINS-27177. It seems that the use of dependents to mean all dependencies predated that. Hard to tell what the original intent was, since the Javadoc does not specify; some of this seems to date to Jenkins 2.0. Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title
Jesse Glick updated an issue
Jenkins / JENKINS-33843
It's not possible to disable/uninstall optional dependencies
The following example
Jenkins.instance.pluginManager.plugins.sort(false, {it.shortName}).each {p ->
println(p.shortName);
println(" dependencies:");
println("unspecified: ${p.dependencies*.shortName.sort()}");
println("optional: ${p.optionalDependencies*.shortName.sort()}");
println("mandatory: ${(p.dependencies - p.optionalDependencies)*.shortName.sort()}");
println(" dependents:");
println("unspecified: ${p.dependents.sort()}");
println("optional: ${p.optionalDependents.sort()}");
println("mandatory: ${(p.dependents - p.optionalDependents).sort()}");
}; null
reveals a mess:
antisamy-markup-formatter
dependencies:
unspecified: [bouncycastle-api, command-launcher, jdk-tool, junit]
optional: [bouncycastle-api, command-launcher, jdk-tool, junit]
mandatory: []
dependents:
unspecified: [greenballs, uno-choice]
optional: []
mandatory: [greenballs, uno-choice]
bouncycastle-api
dependencies:
unspecified: [command-launcher, jdk-tool]
optional: [command-launcher, jdk-tool]
mandatory: []
dependents:
unspecified: [antisamy-markup-formatter, credentials, external-monitor-job, greenballs, junit, ldap, mailer, matrix-project, windows-slaves]
optional: []
mandatory: [antisamy-markup-formatter, credentials, external-monitor-job, greenballs, junit, ldap, mailer, matrix-project, windows-slaves]
command-launcher
dependencies:
unspecified: [jdk-tool, script-security]
optional: [jdk-tool]
mandatory: [script-security]
dependents:
unspecified: [antisamy-markup-formatter, bouncycastle-api, config-file-provider, credentials, external-monitor-job, greenballs, junit, ldap, mailer, matrix-project, scm-api, ssh-credentials, structs, uno-choice, windows-slaves]
optional: []
mandatory: [antisamy-markup-formatter, bouncycastle-api, config-file-provider, credentials, external-monitor-job, greenballs, junit, ldap, mailer, matrix-project, scm-api, ssh-credentials, structs, uno-choice, windows-slaves]
config-file-provider
dependencies:
unspecified: [command-launcher, credentials, jdk-tool, ssh-credentials, structs, token-macro]
optional: [cloudbees-folder, command-launcher, jdk-tool]
mandatory: [credentials, ssh-credentials, structs, token-macro]
dependents:
unspecified: [job-dsl]
optional: [job-dsl]
mandatory: []
credentials
dependencies:
unspecified: [bouncycastle-api, command-launcher, jdk-tool, structs]
optional: [bouncycastle-api, command-launcher, jdk-tool]
mandatory: [structs]
dependents:
unspecified: [config-file-provider, ssh-credentials]
optional: []
mandatory: [config-file-provider, ssh-credentials]
display-url-api
dependencies:
unspecified: [jdk-tool]
optional: [jdk-tool]
mandatory: []
dependents:
unspecified: [mailer]
optional: []
mandatory: [mailer]
external-monitor-job
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick started work on JENKINS-33843 Change By: Jesse Glick Status: Open In Progress Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies pjdarton Enhance the dependency algorithm to differentiate between hard dependencies and soft dependencies Jenkins has long made that distinction. It just was not being honored in this feature. it'd be nice to have a "I know what I'm doing! Do it anyway." option Would be useless since Jenkins core will refuse to even load a plugin which is missing a hard dependency. NetAppBlueDevil I don't even know why the Green Balls plugin has the LDAP plugin listed as an optional dependency This is because it was a plugin split out of core, and for compatibility reasons these are made implicit optional dependencies of all other plugins which were built against a version of core predating that split. But this brings up an important point. Why are these implicit dependencies optional? Well, in the vast majority of cases the old plugin was not actually using the detached functionality, so we do not want to prevent the split plugin from being disabled or uninstalled if it is obviously unused. There are a few cases where something was detached which a number of other plugins actually relied on—the most prominent cases being maven-plugin, matrix-project, and junit—and so there is some risk that an admin would accidentally disable an “optional” dep that was actually critical to some still-enabled plugin’s functioning, typically seen as a NoClassDefFoundError at runtime. Those cases which are not already mitigated by use of @Extension(optional = true) or other defensive coding patterns can be addressed merely by releasing a downstream plugin update which builds against a newer version of Jenkins core: the Maven build will fail until the split plugin is added as a dependency to the POM, causing it to appear as a hard dependency in the binary plugin’s manifest. Add Comment
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title Jesse Glick assigned an issue to Jesse Glick Jenkins / JENKINS-33843 It's not possible to disable/uninstall optional dependencies Change By: Jesse Glick Assignee: Jesse Glick Add Comment This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title NetAppBlueDevil commented on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies +1 Trying to simplify by removing unneeded plugins is just no possible any more. I don't even know why the Green Balls plugin has the LDAP plugin listed as an optional dependency, but it means I can't drop the LDAP one. Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[JIRA] (JENKINS-33843) It's not possible to disable/uninstall optional dependencies
Title: Message Title NetAppBlueDevil edited a comment on JENKINS-33843 Re: It's not possible to disable/uninstall optional dependencies +1 Trying to simplify by removing unneeded plugins is just no not possible any more . I don't even know why the Green Balls plugin has the LDAP plugin listed as an optional dependency, but it means I can't drop the LDAP one. Add Comment This message was sent by Atlassian JIRA (v7.3.0#73011-sha1:3c73d0e) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
