# Failing to install plugin in Jenkins 2.479.1

**URL:** <https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761>\
**Category:** Ask a question\
**Created:** [November 22, 2024, 10:44am UTC](https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761 "2024-11-22T10:44:56Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![RAK5HITHM](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/rak5hithm/32/11732_2.png) [@RAK5HITHM](https://community.jenkins.io/u/RAK5HITHM)\
**Post date:** [November 22, 2024, 10:44am UTC](https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761/1 "2024-11-22T10:44:56Z")

</div>

I am facing the issue of installing the plugins using cli. I am using latest version of jenkins 2.479.1.

```auto
[1.483s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.frame.Frame$Builder source: file:/root/jenkins-cli.jar
[1.484s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.frame.TyrusFrame$FrameType source: file:/root/jenkins-cli.jar
[1.484s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.Masker source: file:/root/jenkins-cli.jar
[1.485s][info][class,load] java.util.concurrent.CompletableFuture$Signaller source: jrt:/java.base
[1.486s][info][class,load] java.util.concurrent.ForkJoinTask$Aux source: shared objects file
[1.530s][info][class,load] hudson.cli.CLI$ClientSideImpl$1 source: file:/root/jenkins-cli.jar
[11.530s][info][class,load] java.util.IdentityHashMap$IdentityHashMapIterator source: shared objects file
[11.530s][info][class,load] java.util.IdentityHashMap$KeyIterator source: shared objects file
[16.709s][info][class,load] io.jenkins.cli.shaded.jakarta.websocket.Decoder$BinaryStream source: file:/root/jenkins-cli.jar
[16.712s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.MessageHandlerManager$MessageHandlerComparator source: file:/root/jenkins-cli.jar
[16.712s][info][class,load] java.util.Arrays$LegacyMergeSort source: shared objects file
[16.712s][info][class,load] java.util.TimSort source: shared objects file
[16.713s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.BasicMessageHandler source: file:/root/jenkins-cli.jar
[16.714s][info][class,load] java.io.DataInputStream source: shared objects file
[16.716s][info][class,load] hudson.cli.PlainCLIProtocol$EitherSide$$Lambda$26/0x00007fdfa802b4a0 source: hudson.cli.PlainCLIProtocol
[16.717s][info][class,load] hudson.cli.PlainCLIProtocol$1 source: file:/root/jenkins-cli.jar
Installing git from update center
[44.141s][info][class,load] io.jenkins.cli.shaded.jakarta.websocket.CloseReason$CloseCodes source: file:/root/jenkins-cli.jar
[44.142s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.frame.CloseFrame$1 source: file:/root/jenkins-cli.jar
[44.142s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.StrictUtf8 source: file:/root/jenkins-cli.jar
[44.143s][info][class,load] java.nio.CharBuffer source: shared objects file
[44.143s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.Utf8DecodingException source: file:/root/jenkins-cli.jar
[44.143s][info][class,load] java.nio.charset.CharsetDecoder source: jrt:/java.base
[44.144s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.StrictUtf8$Decoder source: file:/root/jenkins-cli.jar
[44.144s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.StrictUtf8$Encoder source: file:/root/jenkins-cli.jar
[44.144s][info][class,load] sun.nio.cs.ArrayEncoder source: jrt:/java.base
[44.145s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.client.ClientManager$1$1 source: file:/root/jenkins-cli.jar
[44.153s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.container.jdk.client.TaskQueueFilter$1 source: file:/root/jenkins-cli.jar
[44.154s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.CloseReasons source: file:/root/jenkins-cli.jar
[44.154s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.container.jdk.client.TransportFilter$5 source: file:/root/jenkins-cli.jar
Installing gogs-webhook from update center

ERROR: Failed to install plugin gogs-webhook

```

---

<div class="post-metadata">

**Author:** ![poddingue](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/poddingue/32/985_2.png) [@poddingue](https://community.jenkins.io/u/poddingue)\
**Post date:** [November 26, 2024, 2:27pm UTC](https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761/2 "2024-11-26T14:27:17Z")

</div>

I managed to install it thanks to:

```auto
curl -L -o jenkins-cli.jar $JENKINS_URL/jnlpJars/jenkins-cli.jar
java -jar jenkins-cli.jar -s $JENKINS_URL -auth login:password install-plugin gogs-webhook

```

However, it looks like there are some warnings for the Gogs plugin (`1.0.15`) you’re trying to install. Here are the details and links to the advisories:

- [Gogs plugin 1.0.15](https://plugins.jenkins.io/gogs-webhook)
- [Non-constant time webhook token comparison](https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-2896) - no fix available
- [Unsafe default behavior and information disclosure in webhook](https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-2894) - no fix available

Since there aren’t any fixes available for these issues, it’s recommended to check out the security advisories and see if there are any mitigations you can apply. Alternatively, you might consider uninstalling this plugin if the risks outweigh the benefits for your setup.

---

<div class="post-metadata">

**Author:** ![RAK5HITHM](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/rak5hithm/32/11732_2.png) [@RAK5HITHM](https://community.jenkins.io/u/RAK5HITHM)\
**Post date:** [November 26, 2024, 3:30pm UTC](https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761/3 "2024-11-26T15:30:38Z")

</div>

Hi @poddingue,

Thanks for your reply, its not just gogs plugin, as you can see the logs, the time it takes to install plugin is huge and some times the dependencies is not resolved. The internet speed is fine.

[58.922s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.Utf8DecodingException source: file:/root/jenkins-cli.jar  
[58.922s][info][class,load] java.nio.charset.CharsetDecoder source: jrt:/java.base  
[58.922s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.StrictUtf8$Decoder source: file:/root/jenkins-cli.jar  
[58.923s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.StrictUtf8$Encoder source: file:/root/jenkins-cli.jar  
[58.923s][info][class,load] sun.nio.cs.ArrayEncoder source: jrt:/java.base  
[58.925s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.client.ClientManager$1$1 source: file:/root/jenkins-cli.jar  
[58.926s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.core.CloseReasons source: file:/root/jenkins-cli.jar  
[58.928s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.container.jdk.client.TaskQueueFilter$1 source: file:/root/jenkins-cli.jar  
[58.928s][info][class,load] io.jenkins.cli.shaded.org.glassfish.tyrus.container.jdk.client.TransportFilter$5 source: file:/root/jenkins-cli.jar  
Installing pipeline-stage-view from update center

---

<div class="post-metadata">

**Author:** ![poddingue](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/poddingue/32/985_2.png) [@poddingue](https://community.jenkins.io/u/poddingue)\
**Post date:** [November 26, 2024, 3:43pm UTC](https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761/4 "2024-11-26T15:43:49Z")

</div>

You’re using the `java -jar` command, not the utility script, right?

---

<div class="post-metadata">

**Author:** ![RAK5HITHM](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/rak5hithm/32/11732_2.png) [@RAK5HITHM](https://community.jenkins.io/u/RAK5HITHM)\
**Post date:** [November 26, 2024, 5:19pm UTC](https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761/5 "2024-11-26T17:19:30Z")

</div>

Yes I am using Java -jar

---

<div class="post-metadata">

**Author:** ![poddingue](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/poddingue/32/985_2.png) [@poddingue](https://community.jenkins.io/u/poddingue)\
**Post date:** [November 26, 2024, 6:00pm UTC](https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761/6 "2024-11-26T18:00:49Z")

</div>

Okay, thanks.  
The `jar` is the one you got from your Jenkins controller, right?

---

<div class="post-metadata">

**Author:** ![RAK5HITHM](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/rak5hithm/32/11732_2.png) [@RAK5HITHM](https://community.jenkins.io/u/RAK5HITHM)\
**Post date:** [November 27, 2024, 4:38am UTC](https://community.jenkins.io/t/failing-to-install-plugin-in-jenkins-2-479-1/23761/7 "2024-11-27T04:38:42Z")

</div>

yes using this command `curl http://localhost:8085/jnlpJars/jenkins-cli.jar -o jenkins-cli.jar`
