What is our primary use case?
Jenkins on Hardened Ubuntu is utilized for CI/CD processing, and we manage more than 50 different projects. Each project requires different pipeline procedures and different requirements. We organize our product project pipeline process in Jenkins for web applications, mobile applications, and security checks and testing procedures. We manage our whole infrastructure, continuous integration, and delivery process in Jenkins.
We need Ubuntu hardened images most of the time because we chose Ubuntu. The same process and procedure could be applied regardless of the distribution chosen. Our hardened Ubuntu step operates in AWS. In our images, we need to maintain current security at the kernel and app level. We also require fast opening time and fast build time. If we do not use a package, we do not include it. We run hardening steps every time as an automatic build process. We use Jenkins in the Ubuntu hardening process, which is very important for us. For example, we run Ubuntu hardening images automatically every week. Our pipeline downloads the latest Ubuntu image and runs required tools, then executes hardened steps with Ansible. We use Ansible for the hardening steps. When the tasks are finished, we verify that everything is functioning correctly. Then we upload the AMI to our library for use in new deployments.
Regarding governance and security for Jenkins on Hardened Ubuntu, I can share details about the Ubuntu hardening side. Requirements sometimes change, and we can close every unnecessary tool and service. In the security steps, we can close their ports, use bastion hosts, or if using the cloud, allow access to the server in different ways. For Jenkins, we can block root access. We can also use RBAC.
How has it helped my organization?
Jenkins on Hardened Ubuntu can be improved, but for my business, it is very stable and very useful. Both the Ubuntu and Jenkins processes probably need improvements and steps for specific people and specific companies, but that is acceptable for my needs. Currently, there is no need for any improvements for my organization, though improvements could potentially exist for others.
What is most valuable?
The best features Jenkins on Hardened Ubuntu offers are the ability to add specific steps. This is important for us and also important for the entire sector. When performing a CI/CD process, we sometimes need specific steps and specific tasks, such as running Ansible or performing checks beforehand that require specific access. Jenkins operates on our own infrastructure privately, which is more secure for us. When Jenkins finishes its job, we can securely upload to our image gallery, which is the best feature for us.
The use of Jenkins on Hardened Ubuntu impacts my team's efficiency positively because it is more reliable since other options block us at specific points. We need specific, unique image tags. In our infrastructure, which we have been managing for over seven years, we need specific requirements. We chose Jenkins because it is more flexible and more reliable for specific tasks. We can accomplish everything when we need unique tasks and are not blocked by tool-related problems.
Jenkins on Hardened Ubuntu has positively impacted my organization because we need to maintain current security in sensitive areas. We run our hardened Ubuntu process every week because new security issues emerge weekly. We must check for vulnerabilities and harden our Ubuntu images because all our products use Ubuntu. The most important point for us is keeping our Ubuntu images up-to-date and hardened at all times. Additionally, this hardening process must be an automatic process, which Jenkins provides for us.
What needs improvement?
Jenkins on Hardened Ubuntu can be improved, but for my business, it is very stable and very useful. Both the Ubuntu and Jenkins processes probably need improvements and steps for specific people and specific companies, but that is acceptable for my needs. Currently, there is no need for any improvements for my organization, though improvements could potentially exist for others.
For how long have I used the solution?
We have used Jenkins on Hardened Ubuntu for ten years, but sometimes we use other options. We always return to using Jenkins because it is good for us.
What do I think about the stability of the solution?
Jenkins on Hardened Ubuntu is stable in my experience.
What do I think about the scalability of the solution?
The scalability of Jenkins on Hardened Ubuntu is good because they are very scalable products. We do not need scalability for the Jenkins side because we understand our tasks and our Jenkins setup is very clear, with no need to scale since we know our loads. On the Ubuntu side, we can achieve scalability.
How are customer service and support?
Customer support for Jenkins on Hardened Ubuntu is not needed as we are using community versions. We find experiences on community sites, which is acceptable for us.
Which solution did I use previously and why did I switch?
I did not evaluate other options before choosing Jenkins on Hardened Ubuntu because I have experience with both Jenkins and Ubuntu. We chose it directly based on our own experience without needing to reinvent the wheel.
How was the initial setup?
My experience with pricing, setup cost, and licensing for Jenkins on Hardened Ubuntu is that it is not too much and is affordable for us.
What was our ROI?
I have not seen a return on investment with Jenkins on Hardened Ubuntu.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for Jenkins on Hardened Ubuntu is that it is not too much and is affordable for us.
What other advice do I have?
The advice I would give to others looking into using Jenkins on Hardened Ubuntu is that configuration is easy in Jenkins, and it has extendibility and flexibility. On the hardened Ubuntu side, the community is very powerful and can provide very good hardening solutions. I chose the rating of ten for Jenkins on Hardened Ubuntu because I am still using Jenkins after seven years, and the hardened Ubuntu part includes our critical steps. Both Jenkins and Ubuntu fix our very major, critical problems. We have set up a very critical infrastructure with both Jenkins and the Ubuntu hardening steps without any need for specific challenges. We are satisfied working with Jenkins and Ubuntu.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)