jenkins服务会自动停掉原因分析（二）

原创已于 2022-09-20 10:43:57 修改 · 2.4k 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#jenkins #运维

于 2022-08-18 10:38:42 首次发布

jenkins 同时被 2 个专栏收录

16 篇文章

订阅专栏

docker

12 篇文章

订阅专栏

日志显示存在多个无效的crumb，这通常与 Jenkins 的 CSRF 防护有关。解决方法包括使用 API Token 或安装 StrictCrumbIssuer 插件进行更严格的校验。建议检查 Jenkins 安全配置并更新相关设置以确保系统的安全性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

根据日志查看原因可能是令牌失效

2022-08-17 01:23:20.996+0000 [id=13]    WARNING hudson.security.csrf.CrumbFilter#doFilter: Found invalid crumb afb1521463fbb71e0e55c239dcc8df0ec47a767a746de9113d4fec891df3a567. If you are calling this URL with a script, please use the API Token instead. More information: https://www.jenkins.io/redirect/crumb-cannot-be-used-for-script
2022-08-17 01:23:20.996+0000 [id=13]    WARNING hudson.security.csrf.CrumbFilter#doFilter: No valid crumb was included in request for /ajaxBuildQueue by jenkins. Returning 403.
2022-08-17 01:23:21.021+0000 [id=14]    WARNING hudson.security.csrf.CrumbFilter#doFilter: Found invalid crumb afb1521463fbb71e0e55c239dcc8df0ec47a767a746de9113d4fec891df3a567. If you are calling this URL with a script, please use the API Token instead. More information: https://www.jenkins.io/redirect/crumb-cannot-be-used-for-script
2022-08-17 01:23:21.021+0000 [id=14]    WARNING hudson.security.csrf.CrumbFilter#doFilter: No valid crumb was included in request for /ajaxExecutors by jenkins. Returning 403.
2022-08-17 01:23:23.839+0000 [id=16]    WARNING hudson.security.csrf.CrumbFilter#doFilter: Found invalid crumb afb1521463fbb71e0e55c239dcc8df0ec47a767a746de9113d4fec891df3a567. If you are calling this URL with a script, please use the API Token instead. More information: https://www.jenkins.io/redirect/crumb-cannot-be-used-for-script
2022-08-17 01:23:23.839+0000 [id=16]    WARNING hudson.security.csrf.CrumbFilter#doFilter: No valid crumb was included in request for /ajaxBuildQueue by jenkins. Returning 403.
2022-08-17 01:23:23.851+0000 [id=257]   WARNING hudson.security.csrf.CrumbFilter#doFilter: Found invalid crumb afb1521463fbb71e0e55c239dcc8df0ec47a767a746de9113d4fec891df3a567. If you are calling this URL with a script, please use the API Token instead. More information: https://www.jenkins.io/redirect/crumb-cannot-be-used-for-script
2022-08-17 01:23:23.852+0000 [id=257]   WARNING hudson.security.csrf.CrumbFilter#doFilter: No valid crumb was included in request for /ajaxExecutors by jenkins. Returning 403.
2022-08-17 01:44:36.811+0000 [id=265]   INFO    hudson.model.AsyncPeriodicWork#lambda$doRun$1: Started Periodic background build discarder
2022-08-17 01:44:36.824+0000 [id=265]   INFO    hudson.model.AsyncPeriodicWork#lambda$doRun$1: Finished Periodic background build discarder. 12 ms

由于报错推测是安全问题引起，应该是csrf问题，查看更新日志，如下
在这里插入图片描述

解决方法如下：

1、方法一，未验证

在这里插入图片描述

2、方法二、已验证

2.1 安装插件Strict Crumb Issuer

在这里插入图片描述

2.1 配置插件

在这里插入图片描述

参考：

https://www.jenkins.io/changelog-stable/