Jenkins - Towbar

Upstream source: Current installation guide. Jenkins keeps jobs, plugins, and credentials in /var/jenkins_home. The controller is not a Docker build worker; add dedicated agents instead of mounting the host Docker socket.

Towbar manifest

.towbar/services/jenkins.service.yml

id: jenkins
name: Jenkins
buildServer: null
deployment:
  type: image
  image: jenkins/jenkins:2.528.1-lts-jdk21
container:
  port: 8080
  volumes:
    - name: jenkins_home
      mountPath: /var/jenkins_home
      initialData: image
environments:
  production:
    server: 192.0.2.10
rollout:
  type: recreate
  maintenanceMode: true
  reason: Persistent application data uses a single writer
domains:
  primary: jenkins.example.com
tls:
  mode: direct

Configure

Prepare the example server, connect the repository, and map production to the branch containing these manifests. Replace the example server IP and domain. Commit the manifests, then sync the repository and inspect the resolved configuration.
Keep the Service’s named volumes attached across deployments. Towbar’s Datastore backup policy does not back up Service volumes, so include them in your own recovery plan.
Deploy the Service, then perform the checks below before enabling auto-deploy.

Verify

Complete the unlock wizard, create a small job, and verify it remains after redeployment. Back up Jenkins home before upgrades. For field constraints, see Service manifest.

Last modified on September 27, 2026