Jenkins on Hardened Ubuntu Reviews

Jenkins on Hardened Ubuntu is used for automated testing as well as manual testing, and in automated testing, I am able to organize and streamline the process. Once I build or once the requirement is there, the build pipelines are triggered to get the output and ensure the testing is in progress. It is extremely useful.

There is a role-based access system in Jenkins on Hardened Ubuntu on hardened Ubuntu and I am able to configure it for each user. For a developer, for integrator, for viewer, for reporters, there is a complete role-based access system. I call it RBAC. I have introduced these things and completely integrated with LDAP and it is highly secure.

Real-time feedback is impacting my team's productivity positively. There are a lot of version upgrades. I am at the latest version too, and I have not seen any crash or any problem with the current environment. It is good. I am able to proceed and upgrade. I am almost having 15 to 18 Jenkins on Hardened Ubuntu instances. Globally, I am using it across India and outside India too.

The metrics that I am using to measure the security effectiveness of Jenkins on Hardened Ubuntu are the DORA metrics. There is a standardized DORA metrics. I am already using DORA metrics which is exclusively for those things and there are four to five metrics that can be used to measure those things.

Jenkins on Hardened Ubuntu could include AI chat features in the future to make it even better. When there is a build happening or when there is a job happening, I could ask in the chat how long that takes or what is the current job running. These AI features can be included.

Initially, I faced some issues with plugins that might be incompatible while setting up Jenkins on Hardened Ubuntu. I had to really understand and ensure and set it up. The version and the plugin compatibility have to be checked properly. This helps me to quickly set up the environment.

Jenkins on Hardened Ubuntu is utilized for CI/CD processing, and we manage more than 50 different projects. Each project requires different pipeline procedures and different requirements. We organize our product project pipeline process in Jenkins for web applications, mobile applications, and security checks and testing procedures. We manage our whole infrastructure, continuous integration, and delivery process in Jenkins.

We need Ubuntu hardened images most of the time because we chose Ubuntu. The same process and procedure could be applied regardless of the distribution chosen. Our hardened Ubuntu step operates in AWS. In our images, we need to maintain current security at the kernel and app level. We also require fast opening time and fast build time. If we do not use a package, we do not include it. We run hardening steps every time as an automatic build process. We use Jenkins in the Ubuntu hardening process, which is very important for us. For example, we run Ubuntu hardening images automatically every week. Our pipeline downloads the latest Ubuntu image and runs required tools, then executes hardened steps with Ansible. We use Ansible for the hardening steps. When the tasks are finished, we verify that everything is functioning correctly. Then we upload the AMI to our library for use in new deployments.

Regarding governance and security for Jenkins on Hardened Ubuntu, I can share details about the Ubuntu hardening side. Requirements sometimes change, and we can close every unnecessary tool and service. In the security steps, we can close their ports, use bastion hosts, or if using the cloud, allow access to the server in different ways. For Jenkins, we can block root access. We can also use RBAC.

Jenkins on Hardened Ubuntu can be improved, but for my business, it is very stable and very useful. Both the Ubuntu and Jenkins processes probably need improvements and steps for specific people and specific companies, but that is acceptable for my needs. Currently, there is no need for any improvements for my organization, though improvements could potentially exist for others.

The best features Jenkins on Hardened Ubuntu offers are the ability to add specific steps. This is important for us and also important for the entire sector. When performing a CI/CD process, we sometimes need specific steps and specific tasks, such as running Ansible or performing checks beforehand that require specific access. Jenkins operates on our own infrastructure privately, which is more secure for us. When Jenkins finishes its job, we can securely upload to our image gallery, which is the best feature for us.

The use of Jenkins on Hardened Ubuntu impacts my team's efficiency positively because it is more reliable since other options block us at specific points. We need specific, unique image tags. In our infrastructure, which we have been managing for over seven years, we need specific requirements. We chose Jenkins because it is more flexible and more reliable for specific tasks. We can accomplish everything when we need unique tasks and are not blocked by tool-related problems.

Jenkins on Hardened Ubuntu has positively impacted my organization because we need to maintain current security in sensitive areas. We run our hardened Ubuntu process every week because new security issues emerge weekly. We must check for vulnerabilities and harden our Ubuntu images because all our products use Ubuntu. The most important point for us is keeping our Ubuntu images up-to-date and hardened at all times. Additionally, this hardening process must be an automatic process, which Jenkins provides for us.

Jenkins on Hardened Ubuntu can be improved, but for my business, it is very stable and very useful. Both the Ubuntu and Jenkins processes probably need improvements and steps for specific people and specific companies, but that is acceptable for my needs. Currently, there is no need for any improvements for my organization, though improvements could potentially exist for others.

We have used Jenkins on Hardened Ubuntu for ten years, but sometimes we use other options. We always return to using Jenkins because it is good for us.

Jenkins on Hardened Ubuntu is stable in my experience.

The scalability of Jenkins on Hardened Ubuntu is good because they are very scalable products. We do not need scalability for the Jenkins side because we understand our tasks and our Jenkins setup is very clear, with no need to scale since we know our loads. On the Ubuntu side, we can achieve scalability.

Customer support for Jenkins on Hardened Ubuntu is not needed as we are using community versions. We find experiences on community sites, which is acceptable for us.

I did not evaluate other options before choosing Jenkins on Hardened Ubuntu because I have experience with both Jenkins and Ubuntu. We chose it directly based on our own experience without needing to reinvent the wheel.

My experience with pricing, setup cost, and licensing for Jenkins on Hardened Ubuntu is that it is not too much and is affordable for us.

My experience with pricing, setup cost, and licensing for Jenkins on Hardened Ubuntu is that it is not too much and is affordable for us.

The advice I would give to others looking into using Jenkins on Hardened Ubuntu is that configuration is easy in Jenkins, and it has extendibility and flexibility. On the hardened Ubuntu side, the community is very powerful and can provide very good hardening solutions. I chose the rating of ten for Jenkins on Hardened Ubuntu because I am still using Jenkins after seven years, and the hardened Ubuntu part includes our critical steps. Both Jenkins and Ubuntu fix our very major, critical problems. We have set up a very critical infrastructure with both Jenkins and the Ubuntu hardening steps without any need for specific challenges. We are satisfied working with Jenkins and Ubuntu.

My main use case for Jenkins on Hardened Ubuntu is to manage the CI/CD pipeline of my application where it will automate the complete CI and CD deployment.

A specific example of how I use Jenkins on Hardened Ubuntu for my CI/CD pipeline is with an application where it needs some integration that we need to build the application using Docker and we need to deploy the same application onto the Kubernetes cluster. We have some Docker containers which are running with Jenkins on Hardened Ubuntu installed, and we have mounted that volume to the local Ubuntu server. If something happens to the container, there will be no issue with the data loss as we can recreate the container and attach the same volume to the container which has Jenkins on Hardened Ubuntu, ensuring no data loss. Once Jenkins on Hardened Ubuntu is installed on the container, I access it through the UI and manage the complete pipeline, which includes all stages, such as getting the code from the GitHub repository. We use Maven as my application is Java-based, allowing us to build the code and perform unit tests. Once we have the Maven artifact ready, we use the same WAR file to create an image using Docker. After creating the Docker image, we push it to the ECR repository on the AWS container registry. Once we have the container image available, it is pushed to the Kubernetes cluster using Argo CD deployment, and the same image runs on the Kubernetes clusters.

The best features Jenkins on Hardened Ubuntu offers include performance, where I can access the Jenkins on Hardened Ubuntu UI with no load time and no latency.

Good performance and no latency positively impact my day-to-day work as the Jenkins on Hardened Ubuntu application can be accessed quickly.

Additionally, we have security features in Jenkins on Hardened Ubuntu where I use the credentials feature to keep secure credentials or passwords instead of hardcoding them in the pipeline.

Jenkins on Hardened Ubuntu positively impacts my organization by helping in automating the CI/CD workflows.

With Jenkins on Hardened Ubuntu automating the CI/CD process, it eliminates issues encountered with manual deployment, saving time and reducing errors.

Improvements needed for Jenkins on Hardened Ubuntu include keeping the OS fully patched with the latest security updates, minimizing installed packages, and removing unused services. I suggest restricting SSH, disabling password authentication, using SSH keys, and allowing access only to permitted users while disabling root logins. It would also be good to use HTTPS instead of HTTP for enhanced security, implement authentication methods such as LDAP, Active Directory, OAuth, or SAML, and enable MFA. Moreover, I recommend using RBAC for authorization to provide limited permissions only to certain roles. It is important to manage plugins by removing unused ones and installing those from trusted sources only, along with using secret management tools like HashiCorp Vault or AWS Secrets Manager. Additionally, limiting network access to VPNs, whitelisting specific IPs, and monitoring for login failures and plugin installations can enhance security. Backup processes should include credentials, job definitions, and plugins, and overall, we should have robust production deployments featuring NGINX reverse proxy with HTTPS, centralized logging, daily backups, and tested recovery procedures, along with vulnerability scanning.

I have been using Jenkins on Hardened Ubuntu for almost three plus years.

Jenkins on Hardened Ubuntu is stable in my experience.

Jenkins on Hardened Ubuntu's scalability is effective with its controller and agent architecture.

Customer support for Jenkins on Hardened Ubuntu is accessed through AWS support if issues arise with the server or EC2 instances, and my experience with them has been positive as they provide solutions when needed.

I did not use a different solution before Jenkins on Hardened Ubuntu.

I have seen a return on investment with Jenkins on Hardened Ubuntu as it saves on licensing costs, runs efficiently on various hardware, and long-term support releases reduce the frequency of major upgrades. Automation tools help reduce administration efforts, and using cloud images enables fast provisioning, while standardized deployments decrease configuration time. In addition, large software repositories simplify application installations and long-term support releases provide a stable platform, thereby lowering maintenance effort. This results in reduced operational costs through lower licensing expenses.

My experience with pricing includes considering infrastructure costs such as servers, instances, GPUs, storage, and networking, and potentially operating system support like Ubuntu Pro. I account for AI software or model licensing, implementation effort, ongoing operations, monitoring security tools, and training for support. I calculate the total cost of ownership over three to five years, and factors affecting AI solutions on Ubuntu include CPU or GPU, storage, networking, the number of users accessing it, support levels, and software licensing, along with understanding cloud versus on-premises deployment and maintenance costs.

I did not evaluate any other options before choosing Jenkins on Hardened Ubuntu.

My main use case for Jenkins on Hardened Ubuntu is to build out some of our hardened Docker images used by the different product teams. For that contract, I worked as a platform engineer and essentially what we did was standardize the entire process by which teams or the product teams can leverage images and use it as a base image to build out their own application image to ensure that it is as secure as possible and is also fitted with all the things that are required for the application to run within our client's environments, which includes things like proxy, specific tools that the application might require, and different languages. I mostly also use it to create smoke tests for our re-roll process.

Jenkins on Hardened Ubuntu helped me manage and automate those image builds by allowing us to set up a process to build out our hardened images used by our Elastic Container Service on AWS. In fact, towards the end of when I joined that program, we were having to migrate from that Jenkins environment to Harness, but while we were still working on Jenkins, we had set up a process where we built out our hardened images that get security updates every week. We try to rebuild them once a week and push out that image to all our Elastic Container instances across the different production. There was a process that Jenkins helped us handle, which we call the re-roll process, which essentially just rotates the images, updating the Amazon Machine Images behind the Elastic Container Service instances. We update those images and then try to restart the different product teams' clusters with those updated images to ensure that we have the latest security patch. Jenkins being on a hardened image itself allowed us to safely push out our own hardened images for our Elastic Container service automatically, and teams could easily be assured that whatever gets rolled out at the start of a new week contains the latest security updates and patches that get fixed almost immediately.

The best features Jenkins on Hardened Ubuntu offers include its strong emphasis on security. It allows you to receive your security updates as quickly as possible, and that is the major thing.

Besides the security and quick updates, I found that it was easier to run parallel jobs on Jenkins on Hardened Ubuntu. The way it handles parallel jobs is much smoother than what you would normally have. That stood out to me as a particularly valuable feature.

Jenkins on Hardened Ubuntu has positively impacted my organization by increasing deployment times. The number of deployments that we had increased from around twenty deployments a day to more than double that. It was easier to retry on failure; if anything failed within the automated pipelines, it was easy to retry.

I wish it had a more friendly user interface. I am not entirely sure why the client required us to switch from Jenkins on Hardened Ubuntu to Harness, but I can honestly say I have had some experience with Harness.

I have been using Jenkins on Hardened Ubuntu for about two years in a contract I worked on previously.

Jenkins really served well. It was able to handle concurrency effectively, allowing us to run multiple jobs without running into state errors. For example, when we were using Packer to build out our AMIs on Jenkins on Hardened Ubuntu, it ran smoothly. Jenkins could handle spinning up multiple parallel jobs better than Harness; Harness tended to run into errors because one job was already running that process. Additionally, on Jenkins on Hardened Ubuntu, it was easier to have a retry mechanism; when a job failed and needed to retry, it ran through the entire logic of the current job instead of having issues with other tools.

Towards the end of that contract we were migrating from Jenkins on Hardened Ubuntu to Harness due to CloudBees Jenkins support issues.

I do not have specific numbers or metrics on time saved, error reduction, or other improvements that I noticed after adopting Jenkins on Hardened Ubuntu.

I have not worked with the AI capabilities of Jenkins on Hardened Ubuntu.

I do not know if we purchased Jenkins on Hardened Ubuntu through the AWS Marketplace.

My advice for others looking into using Jenkins on Hardened Ubuntu is to consider if it meets their project requirements and cost requirements. If it does, then obviously go for it, as it offers all the capabilities needed to have a secure platform to run automated pipelines, CI/CD pipelines, and other related tools.

I do not have any additional thoughts about Jenkins on Hardened Ubuntu before we wrap up.

I would rate this product a seven out of ten.

My main use case for Jenkins on Hardened Ubuntu is using a secure CICD pipeline on an Amazon Machine Image, which is already secure, so that deploying code is as secure as it can be rather than running it on my own VM and worrying about the security.

In my use case for Jenkins on Hardened Ubuntu, I write code within Visual Studio Code, push it to our code repository, and then Jenkins on Hardened Ubuntu has a webhook which allows it to link to that repository, enabling it to fetch the code and deploy it by running the CICD pipeline, making Jenkins on Hardened Ubuntu the CICD server in a secure way on Hardened Ubuntu AWS hosted.

There is nothing unique about my workflow or how it integrates with other tools.

One of the best features Jenkins on Hardened Ubuntu offers is that it saves time because rather than trying to have a vanilla OS, such as Ubuntu on an EC2 instance, and then trying to secure it yourself, Jenkins on Hardened Ubuntu is already secured with a ton of insecure features disabled on the VM, which saves us time and is quite cost-effective.

The IAM integration has helped my team because it is quicker to set up and more secure since using AWS IAM roles is natively secure, where long-term credentials can be insecure, but by using already configured IAM roles, it is much more secure.

Jenkins on Hardened Ubuntu has positively impacted my organization because it is more secure to use rather than us trying to use a vanilla OS, lowering the attack surface of common OS-related vulnerabilities.

There is a maintenance overhead to using Jenkins on Hardened Ubuntu since the customer is responsible for patching both Jenkins on Hardened Ubuntu and the OS, and although security issues are somewhat handled, Jenkins on Hardened Ubuntu third-party plugins may still be insecure, and hardened images can be too restrictive.

I do not think there are any other improvements needed for Jenkins on Hardened Ubuntu that have not been mentioned yet.

I've used it within the last year, for a period of around one year.

Jenkins on Hardened Ubuntu is very stable, as it is maintained by AWS.

Jenkins on Hardened Ubuntu is highly scalable because you can choose to have it on one instance, two, three, however many you want, and it automatically scales based on what you need.

The customer support is part of AWS and Amazon support in general, which is always very good, with different tiers available offering quick response times and dedicated account managers for the highest tier.

Negative

The previous solution I used was a vanilla OS, just using Ubuntu, and I switched to Jenkins on Hardened Ubuntu for increased security.

I chose nine out of ten because it is very good for what it aims to do; it could be a little bit cheaper, but that is a minor thing, and I think it is reasonably priced.

I have definitely noticed a reduction in incidents and time saved since switching to Jenkins on Hardened Ubuntu, which saves at least between ten to twenty hours in configuration time, translating to potential savings of hundreds or even thousands of dollars.

From a time saved perspective, this solution saves at least between ten to twenty hours, but likely more, and it could prevent potential losses of tens or hundreds of thousands if it stops a security incident.

The only other option I evaluated before choosing Jenkins on Hardened Ubuntu was just using a base Ubuntu OS rather than a secured version from the Amazon Marketplace.

If you are looking to self-host Jenkins on a VM, Jenkins on Hardened Ubuntu is a very secure way to do it, but many organizations now opt for cloud-managed CICD pipelines, so it is not appropriate for everyone.

There is no other business relationship with this vendor other than being a customer.

I gave this product a rating of nine out of ten.

I am using Jenkins on Hardened Ubuntu for procuring the infrastructure to deploy our applications and procuring databases for various tasks.

The benefits of Jenkins on Hardened Ubuntu include its easy integration with every tool. It can be used as both an integration tool and a deployment tool. With the help of scripts, we can easily configure Jenkins on Hardened Ubuntu in an effective way.

Jenkins on Hardened Ubuntu is an open-source tool that has many plugins to support all applications. This stands out as its main advantage.

I have not seen many disadvantages with Jenkins on Hardened Ubuntu.

From an improvement perspective, implementing AI features would be beneficial. If AI could be integrated for scripting in the Jenkins pipeline, it would be really good for users. Since AI has been adopted for many tools recently, this integration would enhance functionality.

I have been using Jenkins on Hardened Ubuntu for the past six years.

The installation and deployment process is straightforward, and I have not encountered any issues.

Stability is excellent with Jenkins on Hardened Ubuntu. I have experienced minimal unavailability with the system.

Jenkins on Hardened Ubuntu is easy to scale.

We have dealt with technical support from Jenkins on Hardened Ubuntu. The support provided has been good.

Positive

There has been a return on investment for many organizations using Jenkins on Hardened Ubuntu.

The organization handles the payment for Jenkins on Hardened Ubuntu. I am not certain about how they calculate the usage percentage and pricing.

We are using Jenkins on Hardened Ubuntu and other DevOps tools on AWS cloud. As DevOps administrators, we use various tools to configure and manage approximately 1000-1500 servers.

We use leasing services with AWS to reduce costs through bulk purchasing of services.

I work with AWS cloud for infrastructure procurement and database-related tasks. I am not familiar with the distributed build features or automated alerting and auditing features, as a separate team manages those aspects.

On a scale of 1-10, I rate Jenkins on Hardened Ubuntu a 9.

We use Jenkins on Hardened Ubuntu within the company and do not recommend it to customers. I am currently using Jenkins on Hardened Ubuntu mainly to avoid giving users access over the cloud portal.

Jenkins on Hardened Ubuntu is valuable for us from a continuous deployment perspective. We have created a job that allows end-users to start and stop AWS or Azure machines without requiring access to the portal. We give Jenkins access to them, and they can manage their tasks as needed.

We have some jobs to copy files and perform other automated actions on Jenkins. Users can build the job, and their tasks are completed.

Jenkins on Hardened Ubuntu provides privileges to a few users, such as the infrastructure team, who have administrator roles, while others have access only to particular jobs with the appropriate ACL privileges.

We have integrated Jenkins on Hardened Ubuntu with our Active Directory to measure security effectiveness.

Currently, Jenkins on Hardened Ubuntu is almost obsolete. Tools such as GitLab now provide self-sufficient end-to-end deployment options. Azure DevOps and AWS with Bitbucket are similar, and Jenkins is not beneficial for our code deployment perspective anymore.

Many SCM providers are highly capable for deployment, such as GitLab and GitHub, which are sufficient for triggering jobs. I am not exactly aware of how Jenkins on Hardened Ubuntu can be improved since many are moving away from Jenkins.

Most of the plugins currently lack management. Our concern is that some security plugins should at least be maintainable by Jenkins rather than third parties.

I have been working with Jenkins on Hardened Ubuntu for more than eight years.

Since we are using an open source version of Jenkins on Hardened Ubuntu, we have never connected with Jenkins support.

Before using Jenkins on Hardened Ubuntu, we worked with some tools from a cloud provider, such as Argo CD.

My expertise is limited to Jenkins on Hardened Ubuntu and Argo CD. I would recommend the latter as a solution instead.

We have Jenkins plugins and other things for Jenkins on Hardened Ubuntu. There are many security-related plugins that need to be maintained, so some additional features could enhance Jenkins on Hardened Ubuntu's usability.

Jenkins on Hardened Ubuntu is easy to use. Since it is open source, it was highly recommended a decade ago and many organizations used it, but times have changed, and now everyone is shifting to other tools.

We are upgrading Jenkins on Hardened Ubuntu regularly. When a patch update comes, we apply it simultaneously with any available Jenkins updates, which helps us plan accordingly.

I rated this product eight out of ten.

I use Jenkins on Hardened Ubuntu to manage and maintain Jenkins. It is used during conference events.

Regarding Jenkins on Hardened Ubuntu's AI capabilities, I find its governance and security to be quite secure. The accuracy and reliability of Jenkins on Hardened Ubuntu's AI output is 90% accurate.

I have been using Jenkins on Hardened Ubuntu for seven years.

My advice to others looking into using Jenkins on Hardened Ubuntu is to go ahead and use it. I would rate this product an 8 out of 10.

My main use case for Jenkins on Hardened Ubuntu is to run CI/CD pipelines.

A quick specific example of how I use Jenkins on Hardened Ubuntu for my CI/CD pipelines includes having Jenkins pods installed on Hardened Ubuntu, and when we run our deployment, it runs through Jenkins with test cases to deploy on Ubuntu.

The best features Jenkins on Hardened Ubuntu offers include pipelines.

What stands out to me about the pipelines feature is that there are multiple pipelines, and the flexibility is great. It is easy to use; we have timelines, we can see the logs, and everything functions well.

Jenkins on Hardened Ubuntu has positively impacted my organization because it works fast and has helped us improve our CI/CD pipelines.

Jenkins on Hardened Ubuntu functions well in terms of improvement, and I do not have additional suggestions regarding needed improvements.

I have been using Jenkins on Hardened Ubuntu for two years.

I do not want to add anything about the features regarding integration or security.

Regarding Jenkins on Hardened Ubuntu's AI capabilities, I do not know about its governance and security.

Regarding Jenkins on Hardened Ubuntu's AI capabilities, I do not know about its accuracy and reliability of output.

I give this product a rating of 10.

My main use case for Jenkins on Hardened Ubuntu is building pipelines for CI/CD and making sure that it has the proper security where the product that we deploy demands it.

The best features Jenkins on Hardened Ubuntu offers are primarily centered around the security aspect of it, including a security baseline, the ability to set it up as a reverse proxy, and ensuring that it does not allow access to the internet or any other unwanted networks in the company.

The security baseline and reverse proxy setup of Jenkins on Hardened Ubuntu has helped my team by offering a reduced attack surface, meaning we can remove or disable any unnecessary packages. The agents are exposed only to the environments they need access to. Jenkins on Hardened Ubuntu node is built in the same hardened image. Troubleshooting is easier thanks to a more predictable OS behavior compared to a Jenkins server running on a regular server with access by different teams, and we have a better compliance posture.

Jenkins on Hardened Ubuntu really helped me out in a specific deployment scenario by having a lot of different plugins and being a tool that has been around for a very long time. For continuous integration pipelines, it can be used in a number of different ways, whether it is deploying Kubernetes containers or deploying C# code in Azure Functions, as it can handle pretty much anything thanks to the number of extensions and the community around it.

One area Jenkins on Hardened Ubuntu could improve is role control, particularly with RBAC permissions, as this has been an issue for a long time. While some plugins have helped in the past, they are now out of support, making it hard to establish a proper RBAC setup and integrate with SSO, MFA, and similar security measures. Adding some observability with more logs and traces would also be beneficial.

I have been using Jenkins on Hardened Ubuntu for about five to six years on and off.

Jenkins on Hardened Ubuntu is stable.

Jenkins on Hardened Ubuntu's scalability is acceptable, but nothing fancy, as it is an old product.

I have never used customer support for Jenkins on Hardened Ubuntu, if there is any.

I used Azure DevOps, CircleCI, and other tools, but I did not switch per se; they were just used in a different project.

Before choosing Jenkins on Hardened Ubuntu, I evaluated Azure DevOps and CircleCI.

My advice to others looking into using Jenkins on Hardened Ubuntu is that if you really have to use it, it is a good option to give it a try. I would rate this product a 7.