jenkins没有访问目录的权限

Question

我正试图为我的php项目设置Jenkins，并且存在权限问题。显然，Jenkins无法访问它创建的build目录的读/写文件。我尝试过chmod -R 777 build，但是我仍然在Jenkins输出中得到了这个

PHP Warning:  file_put_contents(/var/www/build/logs/phploc.csv): failed to open stream: Permission denied in /var/www/vendor/phploc/phploc/src/Log/CSV/Single.php on line 68

这是我的build.xml文件。我可以在这里做一些事情来允许jenkins访问它正在创建的build目录吗？

<?xml version="1.0" encoding="UTF-8"?>

<project name="mylaravel" default="build" basedir=".">
 <target name="build"
   depends="prepare,lint,phploc,pdepend,phpmd-ci,phpcs-ci,phpcpd,phpdox,phpunit,phpcb"/>

 <target name="build-parallel"
   depends="prepare,lint,tools-parallel,phpunit,phpcb"/>

 <target name="tools-parallel" description="Run tools in parallel">
  <parallel threadCount="2">
   <sequential>
    <antcall target="pdepend"/>
    <antcall target="phpmd-ci"/>
   </sequential>
   <antcall target="phpcpd"/>
   <antcall target="phpcs-ci"/>
   <antcall target="phploc"/>
   <antcall target="phpdox"/>
  </parallel>
 </target>

 <target name="clean" description="Cleanup build artifacts">
  <delete dir="${project.basedir}/build/api"/>
  <delete dir="${project.basedir}/build/code-browser"/>
  <delete dir="${project.basedir}/build/coverage"/>
  <delete dir="${project.basedir}/build/logs"/>
  <delete dir="${project.basedir}/build/pdepend"/>
 </target>

 <target name="prepare" depends="clean" description="Prepare for build">
  <mkdir dir="${project.basedir}/build/api"/>
  <mkdir dir="${project.basedir}/build/code-browser"/>
  <mkdir dir="${project.basedir}/build/coverage"/>
  <mkdir dir="${project.basedir}/build/logs"/>
  <mkdir dir="${project.basedir}/build/pdepend"/>
  <mkdir dir="${project.basedir}/build/phpdox"/>
 </target>

 <target name="lint" description="Perform syntax check of sourcecode files">
  <apply executable="php" checkreturn="1">
   <arg value="-l" />

   <fileset dir="${project.basedir}/app">
    <include name="**/*.php" />
   </fileset>

   <fileset dir="${project.basedir}/app/controllers">
    <include name="**/*.php" />
   </fileset>

   <fileset dir="${project.basedir}/app/models">
    <include name="**/*.php" />
   </fileset>

   <fileset dir="${project.basedir}/app/tests">
    <include name="**/*.php" />
   </fileset>
  </apply>
 </target>

 <target name="phploc" description="Measure project size using PHPLOC">
  <exec executable="${project.basedir}/vendor/bin/phploc" logoutput="true">
   <arg value="--log-csv" />
   <arg value="${project.basedir}/build/logs/phploc.csv" />
   <arg path="${project.basedir}/app" />
  </exec>
 </target>

 <target name="pdepend" description="Calculate software metrics using PHP_Depend">
  <exec executable="${project.basedir}/vendor/bin/pdepend" logoutput="true">
   <arg value="--jdepend-xml=${project.basedir}/build/logs/jdepend.xml" />
   <arg value="--jdepend-chart=${project.basedir}/build/pdepend/dependencies.svg" />
   <arg value="--overview-pyramid=${project.basedir}/build/pdepend/overview-pyramid.svg" />
   <arg path="${project.basedir}/app" />
  </exec>
 </target>

 <target name="phpmd"
         description="Perform project mess detection using PHPMD and print human readable output. Intended for usage on the command line before committing.">
  <exec executable="${project.basedir}/vendor/bin/phpmd" logoutput="true">
   <arg path="${project.basedir}/app" />
   <arg value="text" />
   <arg value="${project.basedir}/phpmd.xml" />
  </exec>
 </target>

 <target name="phpmd-ci" description="Perform project mess detection using PHPMD creating a log file for the continuous integration server">
  <exec executable="${project.basedir}/vendor/bin/phpmd" logoutput="true">
   <arg path="${project.basedir}/app" />
   <arg value="xml" />
   <arg value="${project.basedir}/phpmd.xml" />
   <arg value="--reportfile" />
   <arg value="${project.basedir}/build/logs/pmd.xml" />
  </exec>
 </target>

 <target name="phpcs"
         description="Find coding standard violations using PHP_CodeSniffer and print human readable output. Intended for usage on the command line before committing.">
  <exec executable="${project.basedir}/vendor/bin/phpcs" logoutput="true">
   <arg value="--standard=${project.basedir}/phpcs.xml" />
   <arg path="${project.basedir}/app" />
  </exec>
 </target>

 <target name="phpcs-ci" description="Find coding standard violations using PHP_CodeSniffer creating a log file for the continuous integration server">
  <exec executable="${project.basedir}/vendor/bin/phpcs" output="/dev/null">
   <arg value="--report=checkstyle" />
   <arg value="--report-file=${project.basedir}/build/logs/checkstyle.xml" />
   <arg value="--standard=${project.basedir}/build/phpcs.xml" />
   <arg path="${project.basedir}/app" />
  </exec>
 </target>

 <target name="phpcpd" description="Find duplicate code using PHPCPD">
  <exec executable="${project.basedir}/vendor/bin/phpcpd">
   <arg value="--log-pmd" />
   <arg value="${project.basedir}/build/logs/pmd-cpd.xml" />
   <arg path="${project.basedir}/app" />
  </exec>
 </target>

 <target name="phpdox" description="Generate API documentation using phpDox">
  <exec executable="${project.basedir}/vendor/bin/phpdox"/>
 </target>

 <target name="phpunit" description="Run unit tests with PHPUnit">
  <exec executable="${project.basedir}/vendor/bin/phpunit" logoutput="true" checkreturn="1"/>
 </target>

 <target name="phpcb" description="Aggregate tool output with PHP_CodeBrowser">
  <exec executable="${project.basedir}/vendor/bin/phpcb">
   <arg value="--log" />
   <arg path="${project.basedir}/build/logs" />
   <arg value="--source" />
   <arg path="${project.basedir}/app" />
   <arg value="--output" />
   <arg path="${project.basedir}/build/code-browser" />
  </exec>
 </target>

 <target name="install" description="Prepare files and directories for Jenkins">
    <mkdir dir="./build" />
    <mkdir dir="./generatedJUnitFiles" />

    <chown file="./build" user="jenkins.jenkins" />
    <chown file="./generatedJUnitFiles" user="jenkins.jenkins" />
 </target>

</project>

Answer 1

我想也许有些事你没告诉我们。你用的是某种SCM (bitbucket?)要在ant运行之前将代码签入${project.basedir}？供应商文件夹是随SCM的文件一起来的，还是在文件从SCM下载之后运行composer？

您还可以使用chown -R jenkins:nogroup <files>更改文件的所有权，而不是让所有用户完全访问它们。

编辑(我的业力太小，无法回复评论)：如果您在一个(virtualbox)虚拟机中设置此操作，而Jenkins只使用您的共享文件，您可能会遇到一些权限问题，您可能无法使用chmod或chown修复这些问题。您应该使用以下挂载命令挂载共享文件夹：

mount -t vboxsf -o uid=${UID},gid=${GID} <shared folder> <target>

其中${ uid }是jenkins用户的uid，${GID}是nogroup组的组id (通常为65534)。

如果你使用的是流浪汉，你应该看看这或这。