jenkins/base/jenkins.sh

#!/bin/bash
#
# Copyright 2015 The Bazel Authors. All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# Script to run Jenkins from the Docker image
set -eux

# Take file $1 and copy it to file $2, replacing all instance of
# the string '##SECRET:filename##' by the content of the file
# 'filename' for each file in /opt/secrets
function replace_secrets() {
  if [ "${1##*.}" = "xml" ]; then
    # Only do replacement for xml files
    local content="$(cat $1)"
    for i in /opt/secrets/*; do
      local bi="$(basename $i)"
      if echo -n "${content}" | grep -qF "##SECRET:${bi}##"; then
        content="$(echo -n "${content}" | sed "s|##SECRET:${bi}##|$(cat $i)|g")"
      fi
    done
    # Environment
    for i in $(compgen -v); do
      if echo -n "${content}" | grep -qF "##ENV:${i}##"; then
        local var="$(printenv "$i")"
        content="$(echo -n "${content}" | sed "s|##ENV:${i}##|${var}|g")"
      fi
    done
    echo -n "${content}" >$2
  else
    cp $1 $2
  fi
}
export -f replace_secrets

# Remove existing jobs configuration so we delete jobs
rm -f /var/jenkins_home/jobs/*/config.xml
# Same for nodes
rm -rf /var/jenkins_home/nodes

# Copy the configuration files provided in the docker image
(cd /usr/share/jenkins/ref && \
    find ./ -type f -exec bash -c \
    "mkdir -p /var/jenkins_home/\$(dirname '{}'); \
     rm -f '/var/jenkins_home/{}'; \
     replace_secrets '/usr/share/jenkins/ref/{}' '/var/jenkins_home/{}'" \;)

# Execute Jenkins
exec java ${JAVA_OPTS-} -jar /usr/share/jenkins/jenkins.war ${JENKINS_OPTS-} "$@"