README for cfengine-deb-jenkins

This repository provides configuration and scripts as used by the server for building Debian packages for the CFEngine3.

This code is a fork off Kamilio project support setup (https://github.com/sipwise/kamailio-deb-jenkins). Development of that setup is sponsored by Sipwise.

Involved Software

• Debian (version 7.X, amd64)
• Jenkins
• jenkins-debian-glue
• Jenkins Job Builder

Deployment instructions

NOTE: Using user admin for administration as present on EC2, adjust if necessary.

Install etckeeper for tracking changes in /etc:

sudo apt-get -y install etckeeper git

Automatically deploy jenkins-debian-glue:

wget https://raw.github.com/mika/jenkins-debian-glue/master/puppet/apply.sh
sudo bash ./apply.sh $PASSWORD

Support providing additional configuration to cowbuilder + related tools:

sudo tee -a /etc/sudoers.d/jenkins >/dev/null <<EOF
# for cowbuilder/pbuilder/... instruction:
Defaults  env_keep+="release branch distribution JOB_NAME MIRROR DIST ARCH"
EOF

Grab a copy of this repository:

git clone https://github.com/ballock/cfengine-deb-jenkins.git /home/admin/cfengine-deb-jenkins

Adopt pbuilder for usage with building for Ubuntu:

echo PBUILDER_CONFIG=/etc/jenkins/pbuilderrc | sudo tee -a /etc/jenkins/debian_glue
sudo ln -sf /home/admin/cfengine-deb-jenkins/pbuilder/pbuilderrc /etc/jenkins/pbuilderrc
sudo dpkg -i /home/admin/cfengine-deb-jenkins/debs/ubuntu-keyring_2012.05.19_all.deb

Deploy nginx as proxy for Jenkins (NOTE: you have to do a custom nginx config, this one comes from kamilio):

sudo apt-get -y install nginx
sudo openssl req -days 3650 -nodes -new -x509 -keyout /etc/ssl/private/server.key -out /etc/ssl/private/server.cert
sudo cp /home/admin/cfengine-deb-jenkins/nginx/default /etc/nginx/sites-available/default
sudo /etc/init.d/nginx restart

Set up Debian repository directories:

sudo mkdir /srv/repository
sudo chown jenkins /srv/repository
sudo ln -s /srv/repository/ /srv/deb

GPG key setup for Debian repository:

sudo apt-get install haveged
sudo -s
su - jenkins
gpg --gen-key # note $KEY_ID
gpg --armor --export $KEY_ID --output /srv/deb/autobuilder.gpg
echo KEY_ID=$KEY_ID | sudo tee -a /etc/jenkins/debian_glue

Set up jenkins-job-builder (also create the user and set the password in Jenkins):

sudo tee -a /etc/jenkins_jobs/jenkins_jobs.ini >/dev/null <<EOF
[jenkins]
user=jenkins-job-builder
password=$PASSWORD
url=http://localhost:8080/
EOF

Install Matrix Reloaded Jenkins Plugin:

sudo wget --no-check-certificate -O /var/lib/jenkins/plugins/matrix-reloaded.hpi http://updates.jenkins-ci.org/latest/matrix-reloaded.hpi
sudo chown jenkins:nogroup /var/lib/jenkins/plugins/matrix-reloaded.hpi

Install Build Blocker Jenkins Plugin:

sudo wget --no-check-certificate -O /var/lib/jenkins/plugins/build-blocker-plugin.hpi http://updates.jenkins-ci.org/latest/build-blocker-plugin.hpi
sudo chown jenkins:nogroup /var/lib/jenkins/plugins/build-blocker-plugin.hpi

Fix headless issue with Java:

echo JAVA_ARGS="-Djava.awt.headless=true" | sudo tee -a /etc/default/jenkins
sudo apt-get install ttf-dejavu
sudo java -jar /usr/lib/jvm/java-6-openjdk-common/jre/lib/compilefontconfig.jar \
  /etc/java-6-openjdk/fontconfig.properties \
  /usr/lib/jvm/java-6-openjdk-common/jre/lib/fontconfig.bfc
sudo /etc/init.d/jenkins restart

Generate according Jenkins jobs:

cd /home/admin/cfengine-deb-jenkins/jjb
make

Questions?

For Jenkins/Build environment related questions contact Michael Prokop (mprokop (at) sipwise dot com), for CFEngine (packaging) related questions contact Debian Packaging Team (debian-team (at) cfengine dot com).