Warnings Next Generation Plugin - Development Environment

In order to reduce the initial ramp-up time for new contributors of the Warnings Next Generation Plugin I prepared a docker based development environment that is described in this document. It consists of the following parts:

• Scripts to checkout all modules of the warnings plugin from GitHub. Depending on the part where you want to contribute you normally work with just one of these modules. However, it simplifies the development if all modules are already part of the workspace. Then you can switch at any time to one of the other modules.
• Docker based Jenkins master and agent that has all required plugins installed to see the Warnings plugin in action. This Jenkins instance is already configured properly to build Java modules on a Linux based agent. It also has some jobs defined, that build some of the modules of the Warnings plugin. These jobs record issues of several static analysis tools so you immediately get an impression of the functionality of the Warnings plugin.
• IntelliJ project that references the modules of the Warnings plugin. This project contains presets of my coding style and some other helpful configurations. Note that IntelliJ (or global IntelliJ preferences) are not part of this project.

Supported operating systems

The development environment has been tested on macOS Mojave and Ubuntu Linux 18.04 (in a virtual machine running on macOS). It still needs to be verified, which of these steps work on Windows. Pull requests are always welcome.

TLDR

Installation Requirements

Main Development

The following tools are required (latest version):

• Docker
• Docker Compose
• IntelliJ Ultimate
• Maven
• JDK 8

UI Testing

Additionally, the following tools (latest version) are required:

• firefox and gecko-driver
• chrome and chrome-driver

Installation Steps

1. Clone the warnings plugin modules using the script clone-repos.sh.
2. Import the project into Intellij:
   1. Start IntelliJ
   2. Select Open...
   3. Select the folder warnings-ng-plugin-devenv
   4. When IntelliJ asks : Maven projects need to be imported select Enable Auto-Import.
3. Run the Test Launchers in IntelliJ for analysis-model, forensics-api, git-forensics, and warnings-ng.
4. Start Jenkins with jenkins.sh.
5. Login to Jenkins at: http://localhost:8080/ (admin:admin).
6. Start the provided Jenkins jobs that show the analysis results for the modules analysis-model and warnings-ng.
7. Deploy the current HEAD of the plugins to the Jenkins instance using the Launchers in IntelliJ.

Cloning the modules

In order to clone the modules of the Warnings plugin a simple shell script is provided. The script checks out the following modules using the git SSH protocol. This requires that you have registered your public key in GitHub.

• analysis-model: A library to read static analysis reports into a Java object model. This module is not depending on Jenkins.
• analysis-model-api-plugin: A simple wrapper for the analysis model library. It provides the analysis-model classes as a Jenkins plugin. This overhead is required to simplify upgrades of the analysis-model module in Jenkins.
• forensics-api-plugin: A Jenkins plug-in that defines an API to mine and analyze data from a source control repository.
• git-forensics-plugin: A Jenkins plugin that mines and analyzes data from a Git repository. It implements all extension points of the forensics-api-plugin.
• warnings-ng-plugin: The main plugin that contains all steps and UI classes.

Modifying and debugging code with IntelliJ

IntelliJ (Ultimate) is the main supported development environment for the Warnings plugin. A predefined project is stored in the folder .idea that references all modules of the Warnings plugin. This project contains presets of my coding style and some other helpful configurations.

It should be possible to use other IDEs (Eclipse, Netbeans) as well. The analysis-model library has configuration files (coding style, analysis configuration) for Eclipse. However, these files are not yet available for the other modules.

Running unit and integration tests

In order to run the unit and integrations tests of the modules analysis-model and warnings-ng use the provided Run configurations All in [module-name]. These configurations are already configured to record the branch coverage of the corresponding module packages (Run with Coverage menu).

Debugging

In order to debug code you first need to know where this code is running. If you are unsure, then run both remote debuggers, set some breakpoints and wait for the corresponding debugger to stop.

Debugging Jenkins master

The Jenkins master is always started in 'Debug' mode, i.e. it is listening to remote debug requests. In order to debug your changes you simply need to attach a remote debugger at localhost:8000 (mapped to the same port in the docker container). Use the provided Jenkins Master (Remote Debugger) Debug configuration to connect a debugger in IntelliJ.

Debugging Jenkins Agent

The Jenkins agent is also always started in 'Debug' mode, i.e. it is listening to remote debug requests. In order to debug your changes you simply need to attach a remote debugger at localhost:8001 (mapped to the same port in the docker container). Use the provided Jenkins Agent (Remote Debugger) Debug configuration to connect a debugger in IntelliJ.

Running UI tests

UI tests can be started using the corresponding launchers UI Tests (Firefox) or UI Tests (Chrome). Note that both launchers require an installation of the corresponding Selenium drivers. If these drivers are not installed in /usr/local/bin on your local machine then you need to adapt the launcher configurations to match your setup. UI tests are based on Jenkins Acceptance Test Harness project, see project documentation for more details.

Starting the Jenkins instance

In order to see changes in the Warnings plugin modules it is required to deploy the plugins to a Jenkins instance that contain some jobs that use the plugins. If you have no such instance on your machine already configured, start the provided Jenkins master in this project (you need to install docker and docker-compose). Open a terminal and run ./jenkins.sh in the top level folder. This command is a wrapper to docker-compose up: it uses the right user and group settings so that the permissions of the docker volume for the Jenkins home folder are correctly set. This command creates a docker container for the Jenkins master and one for the Java agent. This will require some time when called the first time since the docker images will be composed. After the images have been created the following two containers will be started:

• jenkins-master: Official Jenkins LTS docker image (Alpine Linux). The master is preconfigured using JCasC to build Java applications on an agent. The master is not allowed to run jobs.
• java-agent: A minimal Java agent based on the official OpenJDK8 docker image (Alpine Linux). Master and slave are connected using SSH.

Volume for JENKINS_HOME

The home directory of the Jenkins master (JENKINS_HOME) is mounted as a docker volume. I.e., it is visible on the host as a normal directory at ./docker/volumes/jenkins-home. It will survive sessions and can be changed directly on the host, see official documentation for details. This helps to inspect the files that have been created by the Jenkins master.

macOS notes

Note that volumes under macOS are quite slow. On my MacBook running the provided Jenkins job of the analysis-model in the docker container is slower than running the same Jenkins job in a docker container that is running in a linux virtual machine on the same MacBook (sounds kind of absurd).

Deploying changed plugins to the Jenkins instance

Once your local development changes are done (i.e., the unit tests are all green) you should test your changes in the Jenkins instance. This also helps to prepare an integration test or UI test for your change. There are three possible kind of changes:

Changing analysis model without adding new API methods

If you have only changes in the analysis-model module (and you added no new API methods) then you need to rebuild and install the maven module analysis-model.jar and afterwards rebuild the associated Jenkins wrapper plugin analysis-model-api-plugin. This plugin then needs to be deployed into the Jenkins instance.

To simplify this process run the script ./go.sh in the analysis-model module, it will install the module analysis-model.jar in your local maven repository. Then this script
will build the actual plugin and deploy it into the Jenkins instance.

Changing the warnings plugin

If you have only changes in the warnings-ng plugin then you need to rebuild the Jenkins plugin warnings-ng.jpi and deploy it into the Jenkins instance. This task is provided by one of the following shell scripts:

• ./clean.sh: Builds the plugin using mvn clean install and deploys it on success into the Jenkins instance.
• ./go.sh: Builds the plugin using mvn clean install -DskipITs (skips the integration tests) and deploys it on success into the Jenkins instace.
• ./skip.sh: Builds the plugin using mvn clean install -DskipTests (skips all tests and static analysis) and deploys it on success into the Jenkins instance.

Changing analysis model with breaking API changes

TODO

Changing forensics-api-plugin and git-forensics-plugin

TODO

IntelliJ Launchers to deploy the plugins

The build scripts from the last section can also be started using one of the IntelliJ launchers Build and Deploy [module-name]. These launchers build the corresponding plugin and deploy it into Jenkins. (Note: there is currently an IntelliJ bug open, so that sometimes the script is started in the wrong folder.)