Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-17289

Re-key operation seems to take unnecessarily long

    Details

    • Similar Issues:

      Description

      While monitoring the rekey.log, I noticed:

      • It searches archived artifacts directories ($JENKINS_HOME/jobs/$JOB_NAME/builds/$BUILD_ID/archive)? Aren't they just saved workspaces (which are known to not contain secrets)? In fact, it looks like 'artifacts' is excluded (according to the Wiki), and not 'archive'.
      • fingerprints/ is scanned as well and probably doesn't need to be
      • It scans both regular and symlinked (like 12 -> 2013-03-19_22-11-03 on Linux) builds, and probably checks every file within twice?

      On this instance, re-keying finished after 40 minutes with rekey.log containing 2425 lines and resulting in 36 re-keyed files. find -L $JENKINS_HOME -name '*.xml' | wc -l found 235320 files. So there's probably some potential for optimization.

      If this is a one-time issue, this can probably be ignored, but if re-keying could be required again in the future, this should be fixed.

        Attachments

          Issue Links

            Activity

            Hide
            evernat evernat added a comment -

            I suppose that re-keying will not be needed anymore and that this can be closed.
            What do you think?

            Show
            evernat evernat added a comment - I suppose that re-keying will not be needed anymore and that this can be closed. What do you think?
            Hide
            danielbeck Daniel Beck added a comment -

            According to the anonymous usage statistics as of end of February, there are still over 10k vulnerable installs out of 78618, or 13.2%.

            Whether the priority still reflects how important this is is a different question.

            Show
            danielbeck Daniel Beck added a comment - According to the anonymous usage statistics as of end of February, there are still over 10k vulnerable installs out of 78618, or 13.2%. Whether the priority still reflects how important this is is a different question.
            Hide
            danielbeck Daniel Beck added a comment -

            Long obsolete.

            Show
            danielbeck Daniel Beck added a comment - Long obsolete.

              People

              • Assignee:
                Unassigned
                Reporter:
                danielbeck Daniel Beck
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: