Introduction
January 15, 2020 · View on GitHub
This is a collection of tips, advice, gotchas and other best practices for using the Jenkins Pipeline plugin. Contributions and comments are happily accepted.
General tips and advice
- Do everything that makes sense there within
stages. This will make your builds easier to visualize, debug, etc. - Do all real work that involves running a shell script, building, etc, within
nodeblocks, so that it actually happens on a real executor, rather than a flyweight executor on the master node. - Get your flows from source control -
Jenkinsfiles, loading libraries, global CPS library, you name it - but if you pull the main flow from SCM (i.e., Multibranch withJenkinsfiles orPipeline from SCM), be aware that you may need to whitelist a lot of method calls in the script security plugin. By getting your flows from source control, you benefit fromJenkinsfileversioning and also testing and merging against your CD Pipeline definition. inputshouldn’t be done within anodeblock. Forinputstep is recommended to usetimeoutin order to avoid waiting for an infinite amount of time, and also control structures (try/catch/finally).- As Pipeline usage is adopted for multiple projects and teams in an organization, common patterns should be stored in Shared Libraries. It is also an escape valve for allowing out-of-sandbox execution in a safe context.
- When writing functions, use unique names in your pipeline script and avoid using built-in/pre-defined items (such as "build", "stage", etc). Using pre-defined methods may result in runtime issues, such as generating a
sandbox.RejectedAccessExceptionerror when using build job DSL. - Make use of the available Pipeline Development Tools for debugging your Pipeline as code.
- Use Multibranch Pipeline for project collaboration, new features (developed in separate branches) are validated before merging them to the master branch. Besides, it comes with automating features out-of-the-box (webhooks).
Parallelism
- Within
parallelblocks, usenodeblocks to make sure you farm out to real nodes for your parallelized work. - Nested
parallelblocks can lead to swamping your available executors, as each execution of the firstparallelblock calls multiple executions of the secondparallelblock, and so on. In general, think carefully about your parallelism and your available executors when usingparallel. - The Parallel Test Executor plugin is awesome and can be immensely helpful both for distributing your test execution and for throttling your parallelism, since you define how many "buckets" your tests get divided into.
- Don’t put
stages directly insideparallelblocks - that just goes weird, breaking a lot of logic in the Stage View and elsewhere. Save yourself the pain - don't do it!
Jenkinsfiles and Multibranch
- Use
checkout scmto automatically checkout current revision of branch - Use
$env.BRANCH_NAMEvariable if you have logical difference in your flow between branches, i.e. to distinguish different behavior for production-ready branches versus sandbox or pull request branches. - For
Jenkinsfiles, make sure to put#!/usr/bin/env groovyat the top of the file so that IDEs, GitHub diffs, etc properly detect the language and do syntax highlighting for you. - But note that this doesn't mean you can run "groovy Jenkinsfile" or "./Jenkinsfile" - Pipeline doesn't run standalone! This is just a trick to help in your IDE, etc.
Groovy gotchas
- Don’t have the Groovy interpreter making blocking i/o calls, i.e.,
HTTPClientand the like - these can cause real problems with resumability, and also require a lot of explicit whitelisting of methods in the Script Security plugin, which is not ideal. - Don’t use the Groovy scripting in place of shell scripting - work coming for the ability to run a Groovy step on the node as with the normal Groovy plugin build step, but until then, shell out, even if it’s just to do
sh 'groovy foo.groovy'.
Scripted Pipeline development tips
- When developing new flows, you can often iterate faster with an inline pipeline, rather than running from SCM. You can use the 'load' operation to load common utility methods from common pipelines, and then as you finish out methods, commit them to the utility flows. This lets you strike a balance between having traceability on commits and being able to move fast.
- NOTE: this isn't possible with Multibranch pipelines, since those have to pull their script from SCM completely, so you will probably want to do your initial development iteration on a single branch using this approach before moving to
Jenkinsfiles.