Jenkins can't check git code

Question

In my jenkins project project, I can check the code from git fine ... but we need to do some git checks, and the credentials do not seem to be cached.

stage 'Checkout' git url: ' [e-mail] :myproj.git', branch: 'master', credentialsId: '012ce21d-e920-44ee-b6f7-08df8ab41de0', variable: 'CREDENTIALS' sh('git push') <---- fails with Permission denied (public key). 

Here is an example output:

 Entering stage Checkout Proceeding [Pipeline] git > git rev-parse --is-inside-work-tree # timeout=10 Fetching changes from the remote Git repository > git config remote.origin.url [e-mail] :myproj # timeout=10 Fetching upstream changes from [e-mail] :myproj.git > git --version # timeout=10 using GIT_SSH to set credentials > git -c core.askpass=true fetch --tags --progress [e-mail] :myproj.git +refs/heads/*:refs/remotes/origin/* > git rev-parse refs/remotes/origin/master^{commit} # timeout=10 > git rev-parse refs/remotes/origin/origin/master^{commit} # timeout=10 Checking out Revision cc35402c6b39e8a1f8d55a831d2d10215d47ccd0 (refs/remotes/origin/master) > git config core.sparsecheckout # timeout=10 > git checkout -f cc35402c6b39e8a1f8d55a831d2d10215d47ccd0 # timeout=10 > git branch -a -v --no-abbrev # timeout=10 > git branch -D master # timeout=10 > git checkout -b master cc35402c6b39e8a1f8d55a831d2d10215d47ccd0 > git rev-list cc35402c6b39e8a1f8d55a831d2d10215d47ccd0 # timeout=10 [Pipeline] sh [myproj] Running shell script + git push --set-upstream origin master Warning: Permanently added the RSA host key for IP address '192.192.143.2' to the list of known hosts. Permission denied (publickey). fatal: Could not read from remote repository. 

Who has a good solution?

thanks

Answer 1

The answer is to use the sshagent jenkins plugin:

http://getmesh.io/Blog/Jenkins+2+Pipeline+101

this plugin introduces SSH_AUTH_SOCK environment variable for git access

Answer 2

Extracted from the Jenkins Sampler Repository, we can do this by avoiding using sshagent: https://github.com/jenkinsci/pipeline-examples/blob/master/pipeline-examples/push-git-repo/pushGitRepo.Groovy

Then for your example, the solution should use the credential binding plugin ( https://wiki.jenkins-ci.org/display/JENKINS/Credentials+Binding+Plugin ) and use this snippet:

 stage ('Checkout') { withCredentials([[$class: 'UsernamePasswordMultiBinding', credentialsId: '012ce21d-e920-44ee-b6f7-08df8ab41de0', usernameVariable: 'GIT_USERNAME', passwordVariable: 'GIT_PASSWORD']]) { sh("git tag -a some_tag -m 'Jenkins'") sh('git push git://${GIT_USERNAME}:${GIT_PASSWORD}@bitbucket.org:myproj.git') } }