MSBuild and Jenkins: where to put credentials?

Question

I am trying to set up a small continuous integration server using Jenkins, Git and MSBuild.
I have read so many different tutorials on this topic but I still have so many questions!

I created a Jenkins job which will pull changes from Git and deploy to another server with MSBuild.

The build action is calling MSBuild.exe and takes the following properties:

/p:VisualStudioVersion=12.0
/p:Configuration=Release
/p:Platform="Any CPU"
/p:DeployOnBuild=True
/p:DeployTarget=Test
/p:MsDeployServiceUrl=https://myserver:8172/MsDeploy.axd
/p:AllowUntrustedCertificate=True
/p:UserName=myusername
/p:Password=mypassword

It is working happily, but I would like to know more. For example:

I am specifying the credentials as properties. Is there a better way to go? Please note that the deployment server is external (not in LAN)
Do I need to use the /P:CreatePackageOnPublish=True property? If yes, why?

Until now I have tried to follow the following tutorials:

What are your credentials being used for that you are using with the /p switch? — granadaCoder, Dec 16 '13 at 19:04
Web Deploy authentication on the target server (IIS or machine user). — StockBreak, Dec 16 '13 at 20:53

score 4 · Accepted Answer · edited May 23 '17 at 12:31

4

I would recommend not building a .sln or .csproj file directly. But write a mini-msbuild-definition file (usually .proj) and put some parameters in there. (And keep your command line call simpler)
Then your question changes slightly to "how do I store credentials". I usually store them in a standalone file.

This url shows how to protect the "sensitive info" file.

Encrypting password in a MSBuild file

I like to store my info in a small xml file, as seen here:

FTP Credentials for MSBuild.ExtensionPack.Communication.Ftp

Here is an example of a "basic msbuild (.proj)" file. (Below link)

This is for CC.NET. But the philosophy is the same. Do very little hudson/jenkins/cc.net/other propietrary calls. Use a .proj file for 99% of what you need to do. and think of your CI (jenkins/cc.net/other) as a "super fancy msbuild executor"

How to setup building steps for CruiseControl.net from repository of the building project?

edited May 23 '17 at 12:31

Community

1
1

answered Dec 16 '13 at 21:07

granadaCoder

26,328
10
113
146

Thanks granadaCoder, I will explore this way of encrypting credentials in another file. What about the /p:CreatePackageOnPublish parameter? – StockBreak Dec 18 '13 at 10:08
That gets coded into the .proj file. – granadaCoder Dec 18 '13 at 14:24
Sorry, I meant what is that parameter for? What does it actually do? – StockBreak Dec 18 '13 at 22:11
I don't know about that one, sorry. – granadaCoder Dec 21 '13 at 16:53

MSBuild and Jenkins: where to put credentials?

1 Answers1