jenkinsci / jenkinsci/workflow-aggregator-plugin

[JENKINS-49184] executing shell in external workspace fails

Open

#856 opened on Jan 26, 2018 4 comments 0 reactions 0 assignees View on GitHub

component:external-workspace-manager-plugin component:pipeline imported-jira-issue pipeline priority:major resolution:unresolved

Dominant language: No language data
Stars: 225
Forks: 125
PR merge metrics: No merged PRs in 30d

Description

This used to work fine.

Since a few days (when we installed some plugin updates) we get a "permission denied" or "Operation not permitted" when executing shell in an external workspace.

When I look at the @tmp workspace I find the script that should have been executed. It has the correct content and executable bits are set:

$ ls -la /media/Builds/super_ArchiveMerged/155@tmp/durable-bb157cd2/

total 1

drwxrwxrwx 2 root root  0 Jan 26 09:47 .

drwxrwxrwx 2 root root  0 Jan 26 09:47 ..

-rwxrwxrwx 1 root root 20 Jan 26 09:47 script.sh

The job is running in Ubuntu, the external workspace is a ntlm network share.

example pipeline script:

node('linux')

{

    def exwsAll = exwsAllocate diskPoolId: 'ArchivedBuilds'

    exws  (exwsAll)

    {   shResult=  sh returnStatus: true, script:'ls -la'

        if (shResult!=0)

        {   println "script returned "+shResult

        }

    }

}

Result:

```
java.nio.file.FileSystemException: /media/Builds/super_ArchiveMerged/156@tmp/durable-57ddd5a7/script.sh: Operation not permitted
at sun.nio.fs.UnixException.translateToIOException(UnixException.java:91)
at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)
at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)
at sun.nio.fs.UnixFileAttributeViews$Posix.setMode(UnixFileAttributeViews.java:238)
at sun.nio.fs.UnixFileAttributeViews$Posix.setPermissions(UnixFileAttributeViews.java:260)
at java.nio.file.Files.setPosixFilePermissions(Files.java:2045)
at hudson.FilePath._chmod(FilePath.java:1647)
at hudson.FilePath.access$1600(FilePath.java:208)
at hudson.FilePath$29.invoke(FilePath.java:1629)
at hudson.FilePath$29.invoke(FilePath.java:1626)
at hudson.FilePath.act(FilePath.java:1009)
at hudson.FilePath.act(FilePath.java:987)
at hudson.FilePath.chmod(FilePath.java:1626)
at org.jenkinsci.plugins.durabletask.BourneShellScript.launchWithCookie(BourneShellScript.java:122)
at org.jenkinsci.plugins.durabletask.FileMonitoringTask.launch(FileMonitoringTask.java:64)
at org.jenkinsci.plugins.workflow.steps.durable_task.DurableTaskStep$Execution.start(DurableTaskStep.java:177)
at org.jenkinsci.plugins.workflow.cps.DSL.invokeStep(DSL.java:224)
at org.jenkinsci.plugins.workflow.cps.DSL.invokeMethod(DSL.java:150)
at org.jenkinsci.plugins.workflow.cps.CpsScript.invokeMethod(CpsScript.java:108)
at groovy.lang.MetaClassImpl.invokeMethodOnGroovyObject(MetaClassImpl.java:1278)
at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1172)
at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1022)
at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:810)
at groovy.lang.GroovyObjectSupport.invokeMethod(GroovyObjectSupport.java:46)
at groovy.lang.MetaClassImpl.invokeMethodOnGroovyObject(MetaClassImpl.java:1278)
at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1172)
at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1022)
at org.codehaus.groovy.runtime.callsite.PogoMetaClassSite.call(PogoMetaClassSite.java:42)
at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)
at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)
at com.cloudbees.groovy.cps.sandbox.DefaultInvoker.methodCall(DefaultInvoker.java:19)
at WorkflowScript.run(WorkflowScript:5)
at ___cps.transform___(Native Method)
at com.cloudbees.groovy.cps.impl.ContinuationGroup.methodCall(ContinuationGroup.java:57)
at com.cloudbees.groovy.cps.impl.FunctionCallBlock$ContinuationImpl.dispatchOrArg(FunctionCallBlock.java:109)
at com.cloudbees.groovy.cps.impl.FunctionCallBlock$ContinuationImpl.fixArg(FunctionCallBlock.java:82)
at sun.reflect.GeneratedMethodAccessor516.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.cloudbees.groovy.cps.impl.ContinuationPtr$ContinuationImpl.receive(ContinuationPtr.java:72)
at com.cloudbees.groovy.cps.impl.CollectionLiteralBlock$ContinuationImpl.dispatch(CollectionLiteralBlock.java:55)
at com.cloudbees.groovy.cps.impl.CollectionLiteralBlock$ContinuationImpl.item(CollectionLiteralBlock.java:45)
at sun.reflect.GeneratedMethodAccessor521.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.cloudbees.groovy.cps.impl.ContinuationPtr$ContinuationImpl.receive(ContinuationPtr.java:72)
at com.cloudbees.groovy.cps.impl.ConstantBlock.eval(ConstantBlock.java:21)
at com.cloudbees.groovy.cps.Next.step(Next.java:83)
at com.cloudbees.groovy.cps.Continuable$1.call(Continuable.java:174)
at com.cloudbees.groovy.cps.Continuable$1.call(Continuable.java:163)
at org.codehaus.groovy.runtime.GroovyCategorySupport$ThreadCategoryInfo.use(GroovyCategorySupport.java:122)
at org.codehaus.groovy.runtime.GroovyCategorySupport.use(GroovyCategorySupport.java:261)
at com.cloudbees.groovy.cps.Continuable.run0(Continuable.java:163)
at org.jenkinsci.plugins.workflow.cps.CpsThread.runNextChunk(CpsThread.java:174)
at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup.run(CpsThreadGroup.java:331)
at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup.access$100(CpsThreadGroup.java:82)
at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup$2.call(CpsThreadGroup.java:243)
at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup$2.call(CpsThreadGroup.java:231)
at org.jenkinsci.plugins.workflow.cps.CpsVmExecutorService$2.call(CpsVmExecutorService.java:64)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at hudson.remoting.SingleLaneExecutorService$1.run(SingleLaneExecutorService.java:131)
at jenkins.util.ContextResettingExecutorService$1.run(ContextResettingExecutorService.java:28)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
```

---
Originally reported by romanz, imported from: executing shell in external workspace fails

assignee: alexsomai
status: Open
priority: Major
component(s): external-workspace-manager-plugin, pipeline
label(s): pipeline, shell, triaged-2018-11
resolution: Unresolved
votes: 0
watchers: 2
imported: 2025-12-08

Raw content of original issue

This used to work fine.
Since a few days (when we installed some plugin updates) we get a "permission denied" or "Operation not permitted" when executing shell in an external workspace.
When I look at the @tmp workspace I find the script that should have been executed. It has the correct content and executable bits are set:

$ ls -la /media/Builds/super_ArchiveMerged/155@tmp/durable-bb157cd2/

total 1

drwxrwxrwx 2 root root  0 Jan 26 09:47 .

drwxrwxrwx 2 root root  0 Jan 26 09:47 ..

-rwxrwxrwx 1 root root 20 Jan 26 09:47 script.sh

The job is running in Ubuntu, the external workspace is a ntlm network share.

example pipeline script:

node('linux')

{

    def exwsAll = exwsAllocate diskPoolId: 'ArchivedBuilds'

    exws  (exwsAll)

    {   shResult=  sh returnStatus: true, script:'ls -la'

        if (shResult!=0)

        {   println "script returned "+shResult

        }

    }

}

Result:

java.nio.file.FileSystemException: /media/Builds/super_ArchiveMerged/156@tmp/durable-57ddd5a7/script.sh: Operation not permitted

	at sun.nio.fs.UnixException.translateToIOException(UnixException.java:91)

	at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:102)

	at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:107)

	at sun.nio.fs.UnixFileAttributeViews$Posix.setMode(UnixFileAttributeViews.java:238)

	at sun.nio.fs.UnixFileAttributeViews$Posix.setPermissions(UnixFileAttributeViews.java:260)

	at java.nio.file.Files.setPosixFilePermissions(Files.java:2045)

	at hudson.FilePath._chmod(FilePath.java:1647)

	at hudson.FilePath.access$1600(FilePath.java:208)

	at hudson.FilePath$29.invoke(FilePath.java:1629)

	at hudson.FilePath$29.invoke(FilePath.java:1626)

	at hudson.FilePath.act(FilePath.java:1009)

	at hudson.FilePath.act(FilePath.java:987)

	at hudson.FilePath.chmod(FilePath.java:1626)

	at org.jenkinsci.plugins.durabletask.BourneShellScript.launchWithCookie(BourneShellScript.java:122)

	at org.jenkinsci.plugins.durabletask.FileMonitoringTask.launch(FileMonitoringTask.java:64)

	at org.jenkinsci.plugins.workflow.steps.durable_task.DurableTaskStep$Execution.start(DurableTaskStep.java:177)

	at org.jenkinsci.plugins.workflow.cps.DSL.invokeStep(DSL.java:224)

	at org.jenkinsci.plugins.workflow.cps.DSL.invokeMethod(DSL.java:150)

	at org.jenkinsci.plugins.workflow.cps.CpsScript.invokeMethod(CpsScript.java:108)

	at groovy.lang.MetaClassImpl.invokeMethodOnGroovyObject(MetaClassImpl.java:1278)

	at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1172)

	at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1022)

	at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:810)

	at groovy.lang.GroovyObjectSupport.invokeMethod(GroovyObjectSupport.java:46)

	at groovy.lang.MetaClassImpl.invokeMethodOnGroovyObject(MetaClassImpl.java:1278)

	at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1172)

	at groovy.lang.MetaClassImpl.invokeMethod(MetaClassImpl.java:1022)

	at org.codehaus.groovy.runtime.callsite.PogoMetaClassSite.call(PogoMetaClassSite.java:42)

	at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:48)

	at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:113)

	at com.cloudbees.groovy.cps.sandbox.DefaultInvoker.methodCall(DefaultInvoker.java:19)

	at WorkflowScript.run(WorkflowScript:5)

	at ___cps.transform___(Native Method)

	at com.cloudbees.groovy.cps.impl.ContinuationGroup.methodCall(ContinuationGroup.java:57)

	at com.cloudbees.groovy.cps.impl.FunctionCallBlock$ContinuationImpl.dispatchOrArg(FunctionCallBlock.java:109)

	at com.cloudbees.groovy.cps.impl.FunctionCallBlock$ContinuationImpl.fixArg(FunctionCallBlock.java:82)

	at sun.reflect.GeneratedMethodAccessor516.invoke(Unknown Source)

	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

	at java.lang.reflect.Method.invoke(Method.java:498)

	at com.cloudbees.groovy.cps.impl.ContinuationPtr$ContinuationImpl.receive(ContinuationPtr.java:72)

	at com.cloudbees.groovy.cps.impl.CollectionLiteralBlock$ContinuationImpl.dispatch(CollectionLiteralBlock.java:55)

	at com.cloudbees.groovy.cps.impl.CollectionLiteralBlock$ContinuationImpl.item(CollectionLiteralBlock.java:45)

	at sun.reflect.GeneratedMethodAccessor521.invoke(Unknown Source)

	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

	at java.lang.reflect.Method.invoke(Method.java:498)

	at com.cloudbees.groovy.cps.impl.ContinuationPtr$ContinuationImpl.receive(ContinuationPtr.java:72)

	at com.cloudbees.groovy.cps.impl.ConstantBlock.eval(ConstantBlock.java:21)

	at com.cloudbees.groovy.cps.Next.step(Next.java:83)

	at com.cloudbees.groovy.cps.Continuable$1.call(Continuable.java:174)

	at com.cloudbees.groovy.cps.Continuable$1.call(Continuable.java:163)

	at org.codehaus.groovy.runtime.GroovyCategorySupport$ThreadCategoryInfo.use(GroovyCategorySupport.java:122)

	at org.codehaus.groovy.runtime.GroovyCategorySupport.use(GroovyCategorySupport.java:261)

	at com.cloudbees.groovy.cps.Continuable.run0(Continuable.java:163)

	at org.jenkinsci.plugins.workflow.cps.CpsThread.runNextChunk(CpsThread.java:174)

	at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup.run(CpsThreadGroup.java:331)

	at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup.access$100(CpsThreadGroup.java:82)

	at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup$2.call(CpsThreadGroup.java:243)

	at org.jenkinsci.plugins.workflow.cps.CpsThreadGroup$2.call(CpsThreadGroup.java:231)

	at org.jenkinsci.plugins.workflow.cps.CpsVmExecutorService$2.call(CpsVmExecutorService.java:64)

	at java.util.concurrent.FutureTask.run(FutureTask.java:266)

	at hudson.remoting.SingleLaneExecutorService$1.run(SingleLaneExecutorService.java:131)

	at jenkins.util.ContextResettingExecutorService$1.run(ContextResettingExecutorService.java:28)

	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)

	at java.util.concurrent.FutureTask.run(FutureTask.java:266)

	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)

	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)

	at java.lang.Thread.run(Thread.java:745)

environment

```
Jenkins ver. 2.101

external-workspace-manager-plugin 1.1.2

script-security-plugin 1.40

pipeline 2.5
```

Contributor guide

Open the contributing guide

Research direction

Start with org.jenkinsci.plugins.durabletask.BourneShellScript.launchWithCookie and the FileMonitoringTask entry point shown in the stack trace, then reproduce the example pipeline on an Ubuntu agent using the external workspace. Investigate the reported permission failure on the NTLM network share; done means the shell step runs successfully there and a regression check covers the failure scenario.

Written by the indexing model from the issue text.

Assessment

Tech stack: java, shell
Domain: ci-cd, devops
Issue type: Bug
Difficulty: 4/5
Estimated time: 3-5 days
Activity status: Stale
Clarity: Needs clarification
Newbie friendliness: 25/100

[JENKINS-49184] executing shell in external workspace fails

Description

Contributor guide

Research direction

Assessment

Get new issues in your inbox