Creating first admin user in Jenkins - Practice Exercises

Challenge - 5 Problems

💻 Command Output

intermediate

Jenkins CLI: Create Admin User Command Output

You run the Jenkins CLI command to create the first admin user with this script snippet:

java -jar jenkins-cli.jar -s http://localhost:8080/ groovy = <<EOF
import jenkins.model.*
import hudson.security.*

def instance = Jenkins.getInstance()

println(instance.securityRealm.createAccount("admin", "admin123"))
EOF

What will be the output?

Jenkins

java -jar jenkins-cli.jar -s http://localhost:8080/ groovy = <<EOF
import jenkins.model.*
import hudson.security.*

def instance = Jenkins.getInstance()

println(instance.securityRealm.createAccount("admin", "admin123"))
EOF

A true

B hudson.security.UserDetailsImpl@<hashcode>

C null

D SyntaxError: unexpected token

💡 Hint

The createAccount method returns a UserDetails object, not a boolean or null.

The createAccount method returns a UserDetails object representing the created user. It does not return true or null. SyntaxError is not possible here because the Groovy script is valid.

🧠 Conceptual

intermediate

Understanding Jenkins Security Realm for Admin User Creation

Which Jenkins security realm setting allows you to create the first admin user by default when Jenkins is freshly installed?

A Jenkins' own user database

B LDAP authentication

C Unix user/group database

D OAuth authentication

💡 Hint

The default Jenkins installation uses a built-in user database for authentication.

By default, Jenkins uses its own user database (called Jenkins' own user database) to manage users including the first admin user. Other options require additional setup.

❓ Troubleshoot

advanced

Troubleshooting Jenkins Admin User Creation Failure

You tried to create the first admin user using a Groovy script in Jenkins CLI but got this error:

java.lang.NullPointerException: Cannot invoke method createAccount() on null object

What is the most likely cause?

A The user already exists

B The Groovy script syntax is incorrect

C The Jenkins instance is not running

D The securityRealm is not initialized because security is disabled

💡 Hint

If security is disabled, securityRealm is null and cannot create users.

If Jenkins security is disabled, the securityRealm object is null, so calling createAccount() on it causes a NullPointerException. Syntax errors or Jenkins not running would cause different errors.

🔀 Workflow

advanced

Steps to Create First Admin User in Jenkins via Script

What is the correct order of steps to create the first admin user in Jenkins using a Groovy script?

A 1,2,3,4

B 2,1,3,4

C 1,3,2,4

D 3,1,2,4

💡 Hint

You must first access CLI, then write and run script, then verify.

The logical workflow is to access CLI, write the script, run it, then verify the user creation.

✅ Best Practice

expert

Best Practice for Securing First Admin User Creation in Jenkins

Which practice is best to secure the creation of the first admin user in Jenkins to avoid exposing credentials?

A Disable security temporarily to create users faster

B Write passwords directly in Groovy scripts for simplicity

C Use environment variables to pass passwords instead of hardcoding in scripts

D Share admin credentials openly to team members for quick access

💡 Hint

Avoid putting passwords directly in code or sharing them openly.

Using environment variables keeps passwords out of scripts and logs, improving security. Disabling security or sharing credentials openly is unsafe.