jenkins报错com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy

jenkins在重启服务器后报错

问题背景

Jenkins版本： 2.332.1
Role-based Authorization Strategy版本：3.2.0
该插件历史版本地址：https://plugins.jenkins.io/role-strategy/releases/

Jenkins所在服务器需要重启，直接对服务器进行了重启，并没有提前使用systemctl stop jenkins命令停止jenkins。导致重启后报错如下：

com.thoughtworks.xstream.mapper.CannotResolveClassException: com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategyat com.thoughtworks.xstream.mapper.DefaultMapper.realClass(DefaultMapper.java:79)atcom.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.DynamicProxyMapper.realClass(DynamicProxyMapper.java:55)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.PackageAliasingMapper.realClass(PackageAliasingMapper.java:88)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.ClassAliasingMapper.realClass(ClassAliasingMapper.java:79)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.ArrayMapper.realClass(ArrayMapper.java:74)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.SecurityMapper.realClass(SecurityMapper.java:71)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at hudson.util.XStream2$CompatibilityMapper.realClass(XStream2.java:379)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at org.jenkinsci.jruby.JRubyMapper.realClass(JRubyMapper.java:34)
        at hudson.util.xstream.MapperDelegate.realClass(MapperDelegate.java:43)
        at com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:30)
        at com.thoughtworks.xstream.mapper.CachingMapper.realClass(CachingMapper.java:48)
        at hudson.util.RobustReflectionConverter.determineType(RobustReflectionConverter.java:461)
        at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:327)
    Caused: jenkins.util.xstream.CriticalXStreamException: com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy : com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy
    ---- Debugging information ----
    message             : com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy
    cause-exception     : com.thoughtworks.xstream.mapper.CannotResolveClassException
    cause-message       : com.michelin.cio.hudson.plugins.rolestrategy.RoleBasedAuthorizationStrategy
    class               : hudson.model.Hudson
    required-type       : hudson.model.Hudson
    converter-type      : hudson.util.RobustReflectionConverter
    path                : /hudson/authorizationStrategy
    line number         : 11
    version             : not available
    -------------------------------
        at hudson.util.RobustReflectionConverter.doUnmarshal(RobustReflectionConverter.java:356)
        at hudson.util.RobustReflectionConverter.unmarshal(RobustReflectionConverter.java:270)
        at com.thoughtworks.xstream.core.TreeUnmarshaller.convert(TreeUnmarshaller.java:72)
        at com.thoughtworks.xstream.core.AbstractReferenceUnmarshaller.convert(AbstractReferenceUnmarshaller.java:65)
        at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:66)
        at com.thoughtworks.xstream.core.TreeUnmarshaller.convertAnother(TreeUnmarshaller.java:50)
        at com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:134)
        at com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)
        at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1189)
        at hudson.util.XStream2.unmarshal(XStream2.java:161)
        at hudson.util.XStream2.unmarshal(XStream2.java:132)
        at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1173)
        at hudson.XmlFile.unmarshal(XmlFile.java:178)
    Caused: java.io.IOException: Unable to read /var/lib/jenkins/config.xml
        at hudson.XmlFile.unmarshal(XmlFile.java:181)
        at hudson.XmlFile.unmarshal(XmlFile.java:161)
        at jenkins.model.Jenkins.loadConfig(Jenkins.java:3005)
        at jenkins.model.Jenkins.access$1300(Jenkins.java:304)
        at jenkins.model.Jenkins$13.run(Jenkins.java:3104)
        at org.jvnet.hudson.reactor.TaskGraphBuilder$TaskImpl.run(TaskGraphBuilder.java:169)
        at org.jvnet.hudson.reactor.Reactor.runTask(Reactor.java:296)
        at jenkins.model.Jenkins$5.runTask(Jenkins.java:1066)
        at org.jvnet.hudson.reactor.Reactor$2.run(Reactor.java:214)
        at org.jvnet.hudson.reactor.Reactor$Node.run(Reactor.java:117)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at java.lang.Thread.run(Thread.java:748)
    Caused: org.jvnet.hudson.reactor.ReactorException
        at org.jvnet.hudson.reactor.Reactor.execute(Reactor.java:282)
        at jenkins.InitReactorRunner.run(InitReactorRunner.java:48)
        at jenkins.model.Jenkins.executeReactor(Jenkins.java:1100)
        at jenkins.model.Jenkins.<init>(Jenkins.java:904)
        at hudson.model.Hudson.<init>(Hudson.java:85)
        at hudson.model.Hudson.<init>(Hudson.java:81)
        at hudson.WebAppMain$3.run(WebAppMain.java:233)
    Caused: hudson.util.HudsonFailedToLoad
        at hudson.WebAppMain$3.run(WebAppMain.java:250)

问题分析

网上看了很多篇文章，都是说可能插件升级了，导致与jenkins版本号不匹配。但是我之前有做过jenkins的数据迁移，一样的jenkins版本号，一样的插件版本，迁移到另一台机器上是能起来的，没有任何问题。
抱着怀疑的心态，我按照网上的方法，将插件版本降级，想看看是不是真的如网上所说，由版本问题引起。于是我尝试了3.1.1版本的role-strategy插件。方法如下，但不建议尝试。

网上的解决方法（都未成功）
网上有一如下方法，但不推荐使用，大致操作都是，备份config.xml文件，修改原config.xml文件，注释或删除掉所有authorizationStrategy块相关的内容，此时Jenkins就可以启动。但没想到的是，这很可能会导致所有Job丢失，这里的丢失即job在磁盘上存在，但在jenkins web页面上不显示，只显示文件夹，文件夹内的所有job都消失了。

1.先进到$JENKINS_HOME目录下，备份config.xml。
mv config.xml config.xml.bak
cp config.xml.bak /opt/

2.在$JENKINS_HOME/config.xml中，注释掉/删除了所有authorizationStrategy块相关的内容，重启jenkins应该可以正常启动，但很大可能会造成job数据丢失

3.还原config.xml
这里需要格外注意该文件的权限
chown -R jenkins:jenkins plugins

本次解决方案

前提：jenkins出问题前，$JENKINS_HOME目录有备份数据

思考：在尝试了很多办法都没能解决后，非常崩溃，后来突然想到之前有备份，既然是插件有问题，而之前做迁移的时候并没有出现这种问题，是不是意味着把备份的数据中plugins文件夹内容直接覆盖现有的plugins文件夹，会不会有效果呢？说干就干。

我直接将目前$JENKINS_HOME的plugins目录整个删除（这里我要提示一下，我删除整个目录是因为我们的插件没有升级过跟之前一样我才这么做，如果你动过插件版本，我还是建议直接删除plugins目录下对应的插件就可以了），接着将备份的$JENKINS_HOME目录下plugins文件夹拷贝到现有的$JENKINS_HOME目录下，重启jenkins，问题居然解决了。

这里有小伙伴可能会说，我没有备份过$JENKINS_HOME目录，我这边提供一个方法思路，但不保证一定可行，即另外找一台机器，用docker或者其他方式，装一个一模一样版本的jenkins，然后去装一样版本的插件，最后将这台机器上好的role-strategy插件文件，替换到新的机器上对应的role-strategy插件原文件，建议替换前建议将jenkins先stop掉，最后重启jenkins看看能不能恢复。

Tips:这里有人会说我不知道之前的role-strategy插件版本是多少，因为jenkins起不来看不到，那我这里的建议是，按照网上的操作，即我上面写的网上的解决方法（都未成功） 那一块的操作，先备份config.xml,把对应的东西都删掉，先把jenkins起来，看到插件版本号后，停掉jenkins，把备份的config.xml还原回去