Platform SIG December 02,2025

[poddingue (Bruno Verachten)]

2025 12 02 Jenkins Platform SIG

Attending:

• Mark Waite
• Kris Stern
• Bruno Verachten

Agenda

• Java 25
  • Released Sep 16, 2025
  • Plugin maintainers can give it a try
    • Available as a tool
    • A .mvn/maven.config may be necessary
    • Jenkins itself is now compatible with JDK25
  • We are trying to compile the top 250 plugins with JDK25
    • Results there: Jenkins PR Tracker

Summary
Total Plugins Tested	250
Successful Builds	129	51.60%
Failed Builds	121	48.40%

• Jenkins Plugins JDK25 compatibility test shows 162 (was 124) plugins are already building with JDK25 for real

• Agents

  • We now have a JDK25 Docker agent image and a JDK25 Docker SSH agent image

• Controller

  • feat(linux): add support on Linux for JDK 25 preview in Docker build configurations has been closed, as Jenkins controller wasn’t compatible with Java 25 yet, but we can recreate it now

• Container image updates for the Jenkins controller

  • LTS
    • 2.528.2 was released three weeks ago
      • 2.528.3 Release candidate was release on 26th November
      • Release on 10th December
      • Release Lead: @krisstern
  • Weeklies (2.538, 2.539, and 2.540)
    • Wait, what? 2 weeks, but 3 “weekly” releases? How come?
      • 2.537 release fails to connect SSH build agents.
      • Pull request to revert the change that caused the issue
      • We ran a weekly release Wednesday, Nov 19, 2025 that includes the reverting PR
      • CSP can now be easily enforced in Jenkins core (Content Security Policy) without requiring a plugin to do it
    • Dependency updates
      • Bump updatecli/updatecli-action to 2.97.0
      • Bump UBI9 version to 9.7-1764578509

• Container image updates for Jenkins agents

  • No new releases for the SSH agent (last being 7.8.0)
  • Three new releases for the docker agent (3352.v17a_fb_4b_2773f-1, 3352.v17a_fb_4b_2773f-2, and 3352.v17a_fb_4b_2773f-2)
    • Dependency updates
      • Bump the Jenkins remoting version to 3352.v17a_fb_4b_2773f
      • Bump Debian trixie Linux version to trixie-20251117
      • Bump UBI9 version to 9.7-1764578509
      • Bump updatecli/updatecli-action to 2.97.0
      • Bump actions/checkout from 5 to 6
    • Bug fixes
      • Accept $ REMOTING_OPTS containing spaces
      • Note
        • The entrypoint script jenkins-agent now requires bash instead of sh.

• Work in progress on images:

  • Controller:
    • None
  • Docker-agent:
    • chore(windows): run each JDK tests in parallel
  • Docker-ssh-agent:
    • Add preserve host keys tips
      • In README.md: Host keys are generated with ssh-keygen -A in setup-httpd. Host keys reside inside the container. When the container is recreated, different host keys are also generated. Jenkins controller may need to re-trust new host keys. We can preserve host keys in mounted volume.
    • feat: add Windows 2025 images for docker-ssh-agent
      • Windows Server 2019 reached the end of mainstream support on January 9, 2024
      • Continuing to use 2019-based images exposes Jenkins environments to unpatched vulnerabilities and compliance issues, as the operating system no longer receives comprehensive maintenance.
      • Switching to Windows Server 2025 ensures ongoing security patches and reduces risks in containerized builds.

• RISC-V

  • We worked on supplying a RISC-V64 recent dockerd, docker, containerd, runc, docker compose set of Debian Trixie packages, so anyone can have an up-to-date docker experience for Jenkins
  • RPM are now available, even if we know that Fedora and others do prefer podman.
  • We also supply ebuilds for Gentoo users
  • Next steps:
    • Supply RISC-V images for Jenkins
    • Supply a RISC-V agent for the infrastructure