Jenkins Groovy执行远程文件字符串替换PowerShell命令报错求助

问题背景 #

以下PowerShell命令可正常替换远程主机remotehost7上文件C:\test1\.env中的字符串：

echo y | plink -ssh -l deploydevuser -pw psww -P 22 remotehost7 -t "powershell -Command '(Get-Content -path C:\test1\.env ) -replace \`http://oldstring.com\`,\`https://newstring.com\` | Set-Content -Path C:\test1\.env'"

但通过Jenkins Groovy脚本执行时出现语法错误，Groovy代码如下：

bat '''
$stringToReplace = "http://oldstring.com"
$replaceWith = "https://newstring.com"
$plinkCmd = "plink -ssh -l deploydevuser -pw psww -P 22 remotehost7"
$updatedRemotePackagePathCyg = "C:\\test1\\.env"
echo "****************starting"
echo "echo y | ${plinkCmd} -t '(Get-Content -path \"\$updatedRemotePackagePathCyg\") -replace \"\$stringToReplace\",\"\$replaceWith\" | Set-Content -Path \"\$updatedRemotePackagePathCyg\"'"
echo "************\$updatedRemotePackagePathCyg****starting"
powershell -Command "echo y | ${plinkCmd} -t '(Get-Content -path \"\$updatedRemotePackagePathCyg\") -replace \"\$stringToReplace\",\"\$replaceWith\" | Set-Content -Path \"\$updatedRemotePackagePathCyg\"'"    
'''

执行后报错信息：

D:\Jenkins\workspace\ityD_feature_imp_exp_url>echo "****************starting"
"****************starting"
D:\Jenkins\workspace\ityD_feature_imp_exp_url>echo "echo y | ${plinkCmd} -t '(Get-Content -path \"$updatedRemotePackagePathCyg\") -replace \"$stringToReplace\",\"$replaceWith\" | Set-Content -Path \"$updatedRemotePackagePathCyg\"'"
"echo y | ${plinkCmd} -t '(Get-Content -path \"$updatedRemotePackagePathCyg\") -replace \"$stringToReplace\",\"$replaceWith\" | Set-Content -Path \"$updatedRemotePackagePathCyg\"'"
D:\Jenkins\workspace\ityD_feature_imp_exp_url>echo "************$updatedRemotePackagePathCyg****starting"
"************$updatedRemotePackagePathCyg****starting"
D:\Jenkins\workspace\ityD_feature_imp_exp_url>powershell -Command "echo y | ${plinkCmd} -t '(Get-Content -path \"$updatedRemotePackagePathCyg\") -replace \"$stringToReplace\",\"$replaceWith\" | Set-Content -Path \"$updatedRemotePackagePathCyg\"'"
At line:1 char:22
+ echo y | ${plinkCmd} -t '(Get-Content -path $updatedRemotePackagePath ...
+                      ~~
Unexpected token '-t' in expression or statement.
At line:1 char:10
+ echo y | ${plinkCmd} -t '(Get-Content -path $updatedRemotePackagePath ...
+          ~~~~~~~~~~~~~~
Expressions are only allowed as the first element of a pipeline.
At line:1 char:25
+ ... linkCmd} -t '(Get-Content -path $updatedRemotePackagePathCyg) -replac ...
+                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Unexpected token ''(Get-Content -path $updatedRemotePackagePathCyg) -replace $stringToReplace,$replaceWith |
Set-Content -Path $updatedRemotePackagePathCyg'' in expression or statement.
    + CategoryInfo          : ParserError: (:) [], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : UnexpectedToken

错误原因 #

1. PowerShell命令解析问题：直接使用${plinkCmd} -t ...会被PowerShell解析为表达式，而非命令调用——变量展开后不是管道的第一个元素，触发语法错误。
2. 多层引号转义混乱：Groovy、Batch、PowerShell三层嵌套下的引号转义处理不当，导致变量未正确展开或命令格式失效。

解决方法 #

方法一：使用&调用命令+参数数组 #

将plink的参数拆分为数组，用&显式调用命令，避免解析错误：

bat '''
$stringToReplace = "http://oldstring.com"
$replaceWith = "https://newstring.com"
# 拆分命令与参数，避免解析歧义
$plinkExe = "plink"
$plinkParams = @(
    "-ssh", "-l", "deploydevuser",
    "-pw", "psww", "-P", "22",
    "remotehost7", "-t"
)
# 构造远程执行的PowerShell脚本，修正引号转义
$remoteScript = @"
powershell -Command "(Get-Content -path 'C:\\test1\\.env') -replace '$stringToReplace','$replaceWith' | Set-Content -Path 'C:\\test1\\.env'"
"@

echo "****************starting"
echo "echo y | & $plinkExe $plinkParams $remoteScript"
echo "************starting"
# 执行命令
echo y | & $plinkExe $plinkParams $remoteScript
'''

方法二：用Here-String构造完整命令 #

通过Here-String简化嵌套引号的处理，再用Invoke-Expression执行：

bat '''
$stringToReplace = "http://oldstring.com"
$replaceWith = "https://newstring.com"
# 用Here-String构造完整命令，避免转义混乱
$fullCommand = @"
echo y | plink -ssh -l deploydevuser -pw psww -P 22 remotehost7 -t "powershell -Command '(Get-Content -path C:\\test1\\.env ) -replace \`"$stringToReplace\`",\`"$replaceWith\`" | Set-Content -Path C:\\test1\\.env'"
"@

echo "****************starting"
echo $fullCommand
echo "************starting"
Invoke-Expression $fullCommand
'''

额外建议 #

• 尽量避免在Jenkins的bat块中嵌套PowerShell，改用powershell块直接编写PowerShell代码，减少多层转义问题。
• 硬编码密码存在安全风险，建议通过Jenkins凭据管理存储密码，再通过环境变量传递到脚本中。

内容的提问来源于stack exchange，提问作者Ashar