Backport of packaging in `stable-2.541` for LTS 2.541.1 by lemeurherve · Pull Request #728 · jenkinsci/packaging

lemeurherve · 2026-01-06T15:11:37Z

This PR is a backport of required changes pushed to the primary branch since the 2d December (3ee2adf, initial commit of stable-2.541 branch created with jenkins-infra/release#832).

Ref:

List of cherry-picked commits

f769f76 - (HEAD -> master, upstream/master, upstream/HEAD, origin/master, origin/HEAD) Update dependency molecule-plugins to v25 (#726) (2026-01-05 07:50:26 +0000) <renovate[bot]>
1e9435d - Remove Java 17 from Windows installer (#724) (2026-01-02 15:33:47 +0100) <Alexander Brandes>
0ce568f - Revise JDK documentation (Revise JDK documentation #723) (2025-12-31 14:44:09 +0000) <Alexander Brandes>
4c2310e - Update renovate config (#719) (2025-12-31 07:00:04 -0700) <Alexander Brandes>
fab62d7 - tests: switch from Apache to Nginx for the local webserver, following production (tests: switch from Apache to Nginx for the local webserver, following production #721) (2025-12-31 06:59:17 -0700) <Damien Duportal>
d886f40 - Require Java 17 or Java 21 for RPM installations and Java 21 for Fedora installations (Require Java 17 or Java 21 for RPM installations and Java 21 for Fedora installations #544)(2025-12-31 06:58:35 -0700) <Virendra Gadekar — Backend Developer | Java • Spring Boot • SQL • APIs>

Warning

Dropped as reverted in #730

+ from #728 (comment):

Pushed 50f0043 which hardcodes the Jenkins version to 2.541 (baseline of the next LTS in any case) as a replay setting JENKINS_VERSION env var to a previous version than 2.545 passed all tests.

Testing done

CI

Submitter checklist

Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
Ensure that the pull request title represents the desired changelog entry
Please describe what you did
Link to relevant issues in GitHub or Jira
Link to relevant pull requests, esp. upstream and downstream changes
Ensure you have provided tests that demonstrate the feature works or the issue is fixed

…rrect location, pointing to the published directory - jenkins-infra/helpdesk#4833 (comment) Signed-off-by: Damien Duportal <[email protected]>

…ent variable 'GPG_PUBLIC_KEY_FILE' Signed-off-by: Damien Duportal <[email protected]>

Signed-off-by: Damien Duportal <[email protected]>

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Fixes jenkins-infra/helpdesk#4055 Since get.jenkins.io already includes the SHA-256 checksum file for the war file and it is copied to two destinations in this script, it seems like a good place to copy the ASCII-armored PGP signatures for the war at the same time. The sha256 file shows that the file downloaded by the user is the same file that was uploaded. The asc file shows that the uploaded file was signed by the Jenkins PGP signing key. Confirmed that the 2.456 asc matches the war file with: $ wget https://pkg.jenkins.io/debian-stable/jenkins.io-2023.key $ gpg --import jenkins.io-2023.key $ wget https://get.jenkins.io/war/2.456/jenkins.war $ wget https://repo.jenkins-ci.org/artifactory/releases/org/jenkins-ci/main/jenkins-war/2.456/jenkins-war-2.456.war.asc $ mv jenkins-war-2.456.war.asc jenkins.war.asc $ gpg --verify jenkins.war.asc Confirmed that the script changes worked as expected with the following commands: MY_WORKDIR=$(mktemp -d) echo My work directory is $MY_WORKDIR AGENT_WORKDIR=${MY_WORKDIR}/agent-workdir SRCDIR=${MY_WORKDIR}/src-dir WARDIR=${MY_WORKDIR}/dest-war-dir WAR_WEBDIR=${MY_WORKDIR}/dest-war-webdir export AGENT_WORKDIR SRCDIR WARDIR WAR_WEBDIR mkdir -p ${AGENT_WORKDIR} ${SRCDIR} ${WARDIR} ${WAR_WEBDIR} ARTIFACTNAME=jenkins BASE=$(pwd) SSH_OPTS= VERSION=2.456 WAR=${SRCDIR}/jenkins.war WAR_SHASUM=${SRCDIR}/jenkins.war.sha256 export ARTIFACTNAME BASE VERSION SSH_OPTS WAR WAR_SHASUM PKGSERVER=localhost export PKGSERVER (cd $SRCDIR && wget https://get.jenkins.io/war/${VERSION}/jenkins.war) (cd $SRCDIR && wget https://get.jenkins.io/war/${VERSION}/jenkins.war.sha256) (cd $SRCDIR && wget https://repo.jenkins-ci.org/artifactory/releases/org/jenkins-ci/main/jenkins-war/${VERSION}/jenkins-war-${VERSION}.war.asc && mv jenkins-war-${VERSION}.war.asc jenkins.war.asc) echo "WARDIR contents before publish:" && ls ${WARDIR} echo bash -v war/publish/publish.sh echo "WARDIR contents after publish:" && ls ${WARDIR}/ echo "WARDIR/VERSION contents after publish:" && ls ${WARDIR}/${VERSION}/

Signed-off-by: Damien Duportal <[email protected]>

lemeurherve · 2026-01-06T15:50:03Z

Molecule tests failing:
https://ci.jenkins.io/job/Packaging/job/packaging/job/PR-728/1/pipeline-overview/?start-byte=0&selected-node=50#log-50-1279

16:36:49  TASK [service] *****************************************************************
16:36:55  fatal: [almalinux-9]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:36:57  fatal: [debian-11]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xe\" for details.\n"}
16:36:57  fatal: [centos-stream-9]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:36:57  fatal: [debian-12]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:36:58  fatal: [oraclelinux-9]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:37:00  fatal: [rockylinux-9]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:38:02  changed: [centos-stream-10]
16:38:02  changed: [amazonlinux-2023]
16:38:02  changed: [ubuntu-24-04]
16:38:02  changed: [debian-13]
16:38:02  changed: [fedora-41]
16:38:02  changed: [opensuse-leap-15.6]
16:38:02  changed: [ubuntu-22-04]

dduportal · 2026-01-06T19:10:18Z

Molecule tests failing: https://ci.jenkins.io/job/Packaging/job/packaging/job/PR-728/1/pipeline-overview/?start-byte=0&selected-node=50#log-50-1279

16:36:49  TASK [service] *****************************************************************
16:36:55  fatal: [almalinux-9]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:36:57  fatal: [debian-11]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xe\" for details.\n"}
16:36:57  fatal: [centos-stream-9]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:36:57  fatal: [debian-12]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:36:58  fatal: [oraclelinux-9]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:37:00  fatal: [rockylinux-9]: FAILED! =&gt; {"changed": false, "msg": "Unable to start service jenkins: Job for jenkins.service failed because the control process exited with error code.\nSee \"systemctl status jenkins.service\" and \"journalctl -xeu jenkins.service\" for details.\n"}
16:38:02  changed: [centos-stream-10]
16:38:02  changed: [amazonlinux-2023]
16:38:02  changed: [ubuntu-24-04]
16:38:02  changed: [debian-13]
16:38:02  changed: [fedora-41]
16:38:02  changed: [opensuse-leap-15.6]
16:38:02  changed: [ubuntu-22-04]

Problem also happen on the master branch today (with 2.545): https://ci.jenkins.io/job/Packaging/job/packaging/job/master/505/pipeline-overview/?selected-node=50
BUT it did not happen yesterday (with 2.544): https://ci.jenkins.io/job/Packaging/job/packaging/job/master/504

lemeurherve · 2026-01-06T20:05:39Z

Pushed 50f0043 which hardcodes the Jenkins version to 2.541 (baseline of the next LTS in any case) as a replay setting JENKINS_VERSION env var to a previous version than 2.545 passed all tests.

Next steps for later:

~~Open an issue about 2.545 not passing tests~~
- Jenkins 2.545 AlmaLinux package forces Java 17 dependency, breaks startup requiring Java 21 #729 (comment)
Improve release checklist and/or branch init script to have a mechanism like 50f0043 explicitely specifying the version to download (could be empty by default), then seded by the init branch script to the desired LTS baseline (like 2.541 here)

lemeurherve · 2026-01-08T15:59:25Z

Warning

d886f40 has since been reverted!

Refs:

Revert "Require Java 17 or Java 21 for RPM installations and Java 21 for Fedora installations" #730
Jenkins 2.545 AlmaLinux package forces Java 17 dependency, breaks startup requiring Java 21 #729

lemeurherve · 2026-01-08T16:03:30Z

d886f40 has since been reverted!

~~Reverted in 34803c9~~

EDIT: commit dropped via a rebase (cleaner and easier for review).

new commit

… production (jenkinsci#721) Signed-off-by: Damien Duportal <[email protected]>

…eving latest weekly 2.545 Molecule tests are currently failing on latest weekly 2.545 while they passed on the previous 2.544 one. Using the LTS base version for this backport.

dduportal and others added 7 commits January 6, 2026 15:50

fix(war,msi) generate latest symlinks at the end of publish in the co…

577b5b1

…rrect location, pointing to the published directory - jenkins-infra/helpdesk#4833 (comment) Signed-off-by: Damien Duportal <[email protected]>

feat(deb,rpm) allow custom GPG public key file through a new environm…

7ba8e89

…ent variable 'GPG_PUBLIC_KEY_FILE' Signed-off-by: Damien Duportal <[email protected]>

fix(debian) put HTML files in the DEB_WEBDIR

2123263

Signed-off-by: Damien Duportal <[email protected]>

Update dependency lit to v3.3.2 (jenkinsci#720)

66559a3

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

feat(prep) download the WAR signature file next to the WAR file

0f89a3a

Signed-off-by: Damien Duportal <[email protected]>

Add asc suffix to signature URL

c2664db

lemeurherve requested a review from a team as a code owner January 6, 2026 15:11

lemeurherve marked this pull request as draft January 6, 2026 15:47

lemeurherve marked this pull request as ready for review January 6, 2026 20:07

lemeurherve changed the title ~~Backport Stable 2.541~~ Backport of packaging in stable-2.541 for LTS 2.541.1 Jan 6, 2026

lemeurherve changed the title ~~Backport of packaging in stable-2.541 for LTS 2.541.1~~ Backport of packaging in stable-2.541 for LTS 2.541.1 Jan 6, 2026

lemeurherve added the into-lts This PR is filed against an LTS branch label Jan 6, 2026

krisstern previously approved these changes Jan 7, 2026

View reviewed changes

lemeurherve mentioned this pull request Jan 8, 2026

LTS 2.541.1 release checklist jenkins-infra/release#811

Closed

51 tasks

dduportal mentioned this pull request Jan 8, 2026

Backport from master (Weekly) in stable-2.541 for LTS 2.541.1 jenkins-infra/release#833

Merged

33 tasks

lemeurherve marked this pull request as draft January 8, 2026 15:59

lemeurherve requested a review from krisstern January 8, 2026 16:03

dduportal and others added 3 commits January 8, 2026 17:05

tests: switch from Apache to Nginx for the local webserver, following…

6bd7626

… production (jenkinsci#721) Signed-off-by: Damien Duportal <[email protected]>

Revise JDK documentation (jenkinsci#723)

435cc6f

hotfix(backport): hardcode safe weekly version 2.541 instead of retri…

5f2a9b3

…eving latest weekly 2.545 Molecule tests are currently failing on latest weekly 2.545 while they passed on the previous 2.544 one. Using the LTS base version for this backport.

lemeurherve force-pushed the stable-2.541 branch from 34803c9 to 5f2a9b3 Compare January 8, 2026 16:05

lemeurherve marked this pull request as ready for review January 8, 2026 16:07

lemeurherve mentioned this pull request Jan 8, 2026

Require Java 17 or Java 21 for RPM installations and Java 21 for Fedora installations #544

Merged

krisstern approved these changes Jan 8, 2026

View reviewed changes

lemeurherve added the release-version:2.541.1 Indicate that this has been or will be used and/or delivered in this Jenkins Core LTS packaging. label Jan 8, 2026

dduportal approved these changes Jan 8, 2026

View reviewed changes

dduportal merged commit 2b5e64a into jenkinsci:stable-2.541 Jan 8, 2026
3 checks passed

lemeurherve deleted the stable-2.541 branch January 8, 2026 17:13

This was referenced Jan 12, 2026

Publish Docker controller LTS images from a stable-<release-line> branch jenkinsci/docker#2195

Open

LTS 2.541.1 release jenkins-infra/helpdesk#4945

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Backport of packaging in `stable-2.541` for LTS 2.541.1#728

Backport of packaging in `stable-2.541` for LTS 2.541.1#728
dduportal merged 10 commits intojenkinsci:stable-2.541from
lemeurherve:stable-2.541

lemeurherve commented Jan 6, 2026 •

edited

Loading

Uh oh!

lemeurherve commented Jan 6, 2026 •

edited

Loading

Uh oh!

dduportal commented Jan 6, 2026

Uh oh!

lemeurherve commented Jan 6, 2026 •

edited

Loading

Uh oh!

lemeurherve commented Jan 8, 2026 •

edited

Loading

Uh oh!

lemeurherve commented Jan 8, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

lemeurherve commented Jan 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

List of cherry-picked commits

Testing done

Submitter checklist

Uh oh!

lemeurherve commented Jan 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dduportal commented Jan 6, 2026

Uh oh!

lemeurherve commented Jan 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

lemeurherve commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

lemeurherve commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

lemeurherve commented Jan 6, 2026 •

edited

Loading

lemeurherve commented Jan 6, 2026 •

edited

Loading

lemeurherve commented Jan 6, 2026 •

edited

Loading

lemeurherve commented Jan 8, 2026 •

edited

Loading

lemeurherve commented Jan 8, 2026 •

edited

Loading