Access AWS CodeCommit from Jenkins running on EC2 (Ubuntu)

I’m trying to integrate Jenkins with AWS CodeCommit. Jenkins is running on an AWS EC2 Instance with Ubuntu 14.04.

I followed this Blogpost:

  • EC2: How to Clone Git Repository
  • Open a HTTP port on Amazon EC2
  • Amazon EC2, deployment with capistrano, how to?
  • Can't push to repository on EC2 - Could not resolve hostname
  • Cannot clone using deploy key (bitbucket) EC2
  • Setting up Git on EC2 to pull from GitHub repo
  • The problem is, that sudo -u jenkins aws configure isn’t executed because the jenkins user has no permissions.

    What would you do?

    The following commands aren’t working as well:

    sudo -u jenkins git config --global credential.helper '!aws codecommit credential-helper $@'
    sudo -u jenkins git config --global credential.useHttpPath true
    sudo -u jenkins git config --global ""
    sudo -u jenkins git config --global "MyJenkinsServer"

    What rights does the jenkins user need?

    Thanks in advance.

  • Deploying Flask application on AWS without downtime
  • Simplifying development process with ColdFusion
  • eb awscli cant deploy from git directory
  • Jenkins triggered code deploy is failing at ApplicationStop step even though same deployment group via code deploy directly is running successfully
  • Startup script on EC2
  • how to deploy changes with chef's deploy resource?
  • 2 Solutions collect form web for “Access AWS CodeCommit from Jenkins running on EC2 (Ubuntu)”

    I was able to achieve this integration using SSH. To some extent, I followed these instructions:
    Setting up for CodeCommit

    Assuming Jenkins Home is /var/lib/jenkins/

    1. Create an ssh key on the Jenkins EC2 instance (/var/lib/jenkins/.ssh/id_rsa)

      ssh-keygen -b 2048 -t rsa -f /var/lib/jenkins/.ssh/id-rsa -a -N
    2. Upload the public key to an IAM user (IAM user must have CodeCommit access)

      aws iam upload-ssh-public-key --user-name <username> --ssh-public-key-body file:///var/lib/jenkins/.ssh/
    3. Collect the SSHPublicKeyID when you upload the key

       "SSHPublicKey": {
       "UserName": "jenkins",
       "Status": "Active",
       "SSHPublicKeyBody": "ssh-rsa <rsa-key> <host>\n",
       "UploadDate": "2015-09-02T19:18:24.309Z",
       "Fingerprint": "xxx",
       "SSHPublicKeyId": "APK***"
    4. Create/modify SSH config file

      Host git-codecommit.*
        User APK*******
        IdentityFile /var/lib/jenkins/.ssh/id_rsa
        StrictHostKeyChecking no
    5. Where the APK*** is the value of the Key ID retrieved in step 3

    6. Copy or move this file to /var/lib/jenkins/.ssh/config (or wherever Jenkins is installed on your EC2 instance)
    7. Ensure ‘jenkins’ user has 0600 permissions to /var/lib/jenkins/.ssh directory
    8. Create a Jenkins job as described in the blog post you first used. For the repository URL, however, enter the SSH url instead. (no credentials needed)

    After doing all of above steps. If it is still not works.
    clone any branch within /var/lib/jenkins/.ssh. It will add known host entry.

    sudo -u jenkins git clone ssh://git-codecommit.<your-region><your test branch>`
    Git Baby is a git and github fan, let's start git clone.