Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-50104

ssh-agent is killed after first use in docker container

    Details

    • Type: Bug
    • Status: Open (View Workflow)
    • Priority: Major
    • Resolution: Unresolved
    • Component/s: ssh-agent-plugin
    • Labels:
      None
    • Environment:
    • Similar Issues:

      Description

      After storing the corresponding credentials in jenkins, run this simple pipeline.

      pipeline {
        agent none
        stages {
          stage('Build') {
            agent {
              docker {
                image 'ubuntu:xenial'
              }
            }
            steps {
              sh 'apt-get update --fix-missing && apt-get install -y --no-install-recommends openssh-server'
              sshagent(['LOOPYBOT_SSH_KEY']) {
                echo 'this works...'
                sh 'ssh -o StrictHostKeyChecking=no -T git@github.com'
                echo '...but by now, the agent is dead already'
                sh 'ssh -o StrictHostKeyChecking=no -T git@github.com'
              }
            }
          }
        }
      }
      

      The first query to github succeeds, as shown in the following logs, but in the meantime the agent is being killed, leading to failure (the second echo does not even get to be executed)

      [Pipeline] sshagent
      [ssh-agent] Using credentials loopybot (Loopybot private SSH key)
      [ssh-agent] Looking for ssh-agent implementation...
      [ssh-agent]   Exec ssh-agent (binary ssh-agent on a remote machine)
      $ docker exec 4fd40aecda7b7e358e741e6d6718f26c859d469782682dd77272373a4a04c6c3 ssh-agent
      SSH_AUTH_SOCK=/tmp/ssh-ff6fQZ8xmkpj/agent.464
      SSH_AGENT_PID=469
      $ docker exec --env DISPLAY=:0 --env SSH_AGENT_PID=469 --env "SSH_ASKPASS=/var/jenkins_home/workspace/test ssh-agent@tmp/askpass_6666993461119741620.sh" --env SSH_AUTH_SOCK=/tmp/ssh-ff6fQZ8xmkpj/agent.464 --env SSH_PASSPHRASE=P44G4LUcCR 4fd40aecda7b7e358e741e6d6718f26c859d469782682dd77272373a4a04c6c3 ssh-add "/var/jenkins_home/workspace/test ssh-agent@tmp/private_key_750299606857458225.key"
      Identity added: /var/jenkins_home/workspace/test ssh-agent@tmp/private_key_750299606857458225.key (/var/jenkins_home/workspace/test ssh-agent@tmp/private_key_750299606857458225.key)
      [ssh-agent] Started.
      [Pipeline] {
      [Pipeline] echo
      this works...
      [Pipeline] sh
      [test ssh-agent] Running shell script
      + ssh -o StrictHostKeyChecking=no -T git@github.com
      $ docker exec --env SSH_AGENT_PID=469 --env SSH_AUTH_SOCK=/tmp/ssh-ff6fQZ8xmkpj/agent.464 4fd40aecda7b7e358e741e6d6718f26c859d469782682dd77272373a4a04c6c3 ssh-agent -k
      unset SSH_AUTH_SOCK;
      unset SSH_AGENT_PID;
      echo Agent pid 469 killed;
      [ssh-agent] Stopped.
      Warning: Permanently added 'github.com,192.30.253.112' (RSA) to the list of known hosts.
      Hi loopybot! You've successfully authenticated, but GitHub does not provide shell access.
      [Pipeline] }
      [Pipeline] // sshagent
      [Pipeline] }
      $ docker stop --time=1 4fd40aecda7b7e358e741e6d6718f26c859d469782682dd77272373a4a04c6c3
      $ docker rm -f 4fd40aecda7b7e358e741e6d6718f26c859d469782682dd77272373a4a04c6c3
      [Pipeline] // withDockerContainer
      [Pipeline] }
      [Pipeline] // node
      [Pipeline] }
      [Pipeline] // stage
      [Pipeline] End of Pipeline
      ERROR: script returned exit code 1
      Finished: FAILURE
      

        Attachments

          Activity

          Hide
          santi Santi Villalba added a comment -

          Maybe related to JENKINS-43050.

          Show
          santi Santi Villalba added a comment - Maybe related to  JENKINS-43050 .

            People

            • Assignee:
              Unassigned
              Reporter:
              santi Santi Villalba
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: