Jenkins jfrog plugin stops working with error about encryption key file

[enaess]

Describe the bug

Just upgraded to the latest jfrog-plugin on Jenkins (1.6.0), running Jenkins 2.541.1. Now, all my builds stopped working.

Current behavior

The build bombs out with the following:

[Test_-_Child] $ docker exec --workdir C:\Jenkins\workspace\Test_-_Child --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** --env ******** 65fc47e951ef2fa56a5aada11df4975b802c47a1ccfd5183054733e928c0c35c cmd.exe /C "C:\Jenkins\tools\io.jenkins.plugins.jfrog.JfrogInstallation\jfrog-cli\jf.exe c add art1 --user=buildops ******** --url=https://xxxx.xxxx.com/ --artifactory-url=https://xxxx.xxxx.com/artifactory --distribution-url=https://xxxx.xxxx.com/distribution --xray-url=https://xxxx.xxxx.com/xray --interactive=false --overwrite=true && exit %%ERRORLEVEL%%"
11:51:36 [Warn] failed while trying to check latest JFrog CLI version: json: unknown field "url"
11:51:36 [Info] Trace ID for JFrog Platform logs: 91dd7e8b3e843702
11:51:36 [Error] failed to stat encryption key file 'C:\Jenkins\workspace\Test_-_Child/.jfrog/encryption/6fef8ed4-d45f-4db5-af4f-295c7f775eee.key': GetFileAttributesEx C:\Jenkins\workspace\Test_-_Child/.jfrog/encryption/6fef8ed4-d45f-4db5-af4f-295c7f775eee.key: The system cannot find the file specified.

Reproduction steps

            tools {
                jfrog "jfrog-cli"
            }
            steps {
                script {
                    jf 'rt ping'
                    powershell '''
                        Start-Sleep -Seconds 700
                    '''
                }
            }
        }

Expected behavior

This should work.

JFrog plugin version

1.6.0

JFrog CLI version

2.91.0

Operating system type and version

Windows, Linux, Mac

JFrog Artifactory version

7.133.3

JFrog Xray version

N/A

[enaess]

Ran the entire thing with the following set in the environment:

    JFROG_CLI_PASSWORD_STDIN_SUPPORT="FALSE"
    JFROG_CLI_AVOID_NEW_VERSION_WARNING="TRUE"
    JFROG_CLI_LOG_LEVEL="DEBUG"

The use of STDIN_SUPPORT TRUE/FALSE didn't change anything. Artifactory version: 7.133.3

12:19:39 [Debug] OS/Arch: windows/amd64
12:19:39 [Debug] Trace ID for JFrog Platform logs: 5a3b84240d46bc85
12:19:39 [Debug] Locking config file to run config AddOrEdit command.
12:19:39 [Debug] Creating lock in: C:\Jenkins\workspace\Test_-_Child@tmp\jfrog\36\.jfrog\locks\config
12:19:39 [Debug] config file is released.
12:19:39 [Debug] Sending HTTP GET request to: https://xxxx.xxxx.com/artifactory/api/security/encryptedPassword
12:19:39 [Debug] Releasing lock: C:\Jenkins\workspace\Test_-_Child@tmp\jfrog\36\.jfrog\locks\config\jfrog-cli.conf.lck.12960.1770754779385510300
12:19:39 [Info] Trace ID for JFrog Platform logs: 5a3b84240d46bc85
12:19:39 [Error] failed to stat encryption key file 'C:\Jenkins\workspace\Test_-_Child/.jfrog/encryption/8c2d58d0-8ab0-43a5-97b4-70e258a738b6.key': GetFileAttributesEx C:\Jenkins\workspace\Test_-_Child/.jfrog/encryption/8c2d58d0-8ab0-43a5-97b4-70e258a738b6.key: The system cannot find the file specified.
Found unhandled java.lang.RuntimeException exception:
Couldn't execute 'jf' command. RuntimeException: Running 'jf' command failed with exit code 1
	PluginClassLoader for jfrog//io.jenkins.plugins.jfrog.JfStep$Execution.run(JfStep.java:134)
	PluginClassLoader for jfrog//io.jenkins.plugins.jfrog.JfStep$Execution.run(JfStep.java:92)
	PluginClassLoader for workflow-step-api//org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:49)
	java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572)
	java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
	java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
	java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
	java.base/java.lang.Thread.run(Thread.java:1583)```

[enaess]

I have rolled back the version of jfrog-plugin to 1.5.10 and it works for me.

[cap-tskukan]

I experienced the same issue in my environment with version 1.6. Rolling back to 1.5.10 also resolved our issue.

[DemKlausDesing]

We also experience that 1.6.0 doesn't work with the following exception:

hudson.remoting.ProxyException: java.nio.file.AccessDeniedException: /home/jenkins at java.base/sun.nio.fs.UnixException.translateToIOException(Unknown Source) at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source) at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source) at java.base/sun.nio.fs.UnixFileSystemProvider.createDirectory(Unknown Source) at java.base/java.nio.file.Files.createDirectory(Unknown Source) at java.base/java.nio.file.Files.createAndCheckIsDirectory(Unknown Source) at java.base/java.nio.file.Files.createDirectories(Unknown Source) at PluginClassLoader for jfrog//io.jenkins.plugins.jfrog.actions.JFrogCliConfigEncryption.<init>(JFrogCliConfigEncryption.java:38) Caused: hudson.remoting.ProxyException: java.lang.RuntimeException: java.nio.file.AccessDeniedException: /home/jenkins at PluginClassLoader for jfrog//io.jenkins.plugins.jfrog.actions.JFrogCliConfigEncryption.<init>(JFrogCliConfigEncryption.java:45) at PluginClassLoader for jfrog//io.jenkins.plugins.jfrog.JfStep$Execution.setupJFrogEnvironment(JfStep.java:195) at PluginClassLoader for jfrog//io.jenkins.plugins.jfrog.JfStep$Execution.run(JfStep.java:124) Also: hudson.remoting.ProxyException: org.jenkinsci.plugins.workflow.actions.ErrorAction$ErrorId: a3bff8cc-4d77-4879-8bf6-f75471890393 Caused: hudson.remoting.ProxyException: java.lang.RuntimeException: Couldn't execute 'jf' command. AccessDeniedException: /home/jenkins at PluginClassLoader for jfrog//io.jenkins.plugins.jfrog.JfStep$Execution.run(JfStep.java:134) at PluginClassLoader for jfrog//io.jenkins.plugins.jfrog.JfStep$Execution.run(JfStep.java:92) at PluginClassLoader for workflow-step-api//org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:49) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) at java.base/java.util.concurrent.FutureTask.run(Unknown Source) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.base/java.lang.Thread.run(Unknown Source)

Roll back to 1.5.10 solves that problem and the plugin works again.

[aidanleuck]

I can confirm that we also have this problem with the latest version.

[puni2k]

You might want to copy this issue to this forked repo https://github.com/jfrog/jenkins-jfrog-plugin
The encryption file related changes were integrated there.

PS: Fails in our environment too.

Edit: I think the root cause is already described here ( jfrog#139 (comment) ).
The encryption file is created on the controller, which isn't helpful when the job runs on a separate agent

[DavidBenjaminsson]

I also experience this issue. A workaround I found was to set the JFROG_CLI_HOME_DIR env variable like this in the Jenkinsfile:

environment {
      JFROG_CLI_HOME_DIR = "${WORKSPACE_TMP}/.jfrog"
}

This is not a sustainable fix because it requires you to update every jenkinsfile but maybe it can be of help for you to resolve the issue.

[itsmeleela]

Thank you for bringing this issue to our attention.
The Jenkins JFrog plugin version 1.6.1 has been released, and it includes the fix for the same.
You're welcome to upgrade to this version, and we'd love to hear your feedback!

[DemKlausDesing]

After installing 1.6.1 it works in our environment!

Thank you for solving the problem!

[chamacs]

Version 1.6.1 still failing when multiple agents are used in the pipeline.

pipeline {
    agent {
        label 'agent-one'
    }
    tools {
        jfrog 'JFrog CLI'
    }
    environment {
        ART_CREDS = credentials('artifactory-integration')
    }
    stages {
        stage('Agent 1 Test') {
            steps {
                jf 'config add our-artifactory --artifactory-url $ARTIFACTORY_URL --user $ART_CREDS_USR --password $ART_CREDS_PSW'
                jf 'rt ping'
            }
        }
        stage('Agent 2 Test') {
            agent {
                label 'agent-two'
            }
            steps {
                jf 'config add our-artifactory --artifactory-url $ARTIFACTORY_URL --user $ART_CREDS_USR --password $ART_CREDS_PSW'
                jf 'rt ping'
            }
        }
    }
}

Agent 1 Test works, but Agent 2 Test fails with:

[JFrog Plugin Test] $ /home/jenkins/agent/tools/io.jenkins.plugins.jfrog.JfrogInstallation/JFrog_CLI/jf config add our-artifactory --artifactory-url $ARTIFACTORY_URL --user $ART_CREDS_USR --password $ART_CREDS_PSW
15:37:29 [Info] Trace ID for JFrog Platform logs: 7a58de8f2b30e135
15:37:29 [Error] failed to stat encryption key file '/home/jenkins/agent/workspace/DSO Team/JFrog Plugin Test@tmp/jfrog/8/.jfrog/encryption/78fe85b3-2e93-4235-a4ae-acef9468e7e8.key': stat /home/jenkins/agent/workspace/DSO Team/JFrog Plugin Test@tmp/jfrog/8/.jfrog/encryption/78fe85b3-2e93-4235-a4ae-acef9468e7e8.key: no such file or directory