{"id":15857,"date":"2019-04-11T12:17:23","date_gmt":"2019-04-11T12:17:23","guid":{"rendered":"https:\/\/blog.taragana.com\/?p=15857"},"modified":"2019-04-11T12:50:02","modified_gmt":"2019-04-11T12:50:02","slug":"recommendation-private-corporate-maven-repository-sonatype-nexus-or-jfrog-artifactory","status":"publish","type":"post","link":"https:\/\/blog.taragana.com\/recommendation-private-corporate-maven-repository-sonatype-nexus-or-jfrog-artifactory-15857","title":{"rendered":"Recommendation: Private \/ Corporate Maven Repository: Sonatype Nexus or jFrog Artifactory"},"content":{"rendered":"\n<h2>Requirements: <\/h2>\n\n\n\n<ul><li>I am writing several reusable libraries which need to refer each other in myriad ways, each may be worked upon by different developer. <ul><li>I don&#8217;t want to create a jumbo project with sub-modules where access control is a pita.<\/li><\/ul><\/li><li>I don&#8217;t want the repository to be publicly accessible. <ul><li>There should be fine-grained access control<\/li><\/ul><\/li><li>I want to publish them as I would to maven central. <\/li><li>Ideally, it should also proxy maven central so I don&#8217;t have to use multiple repositories.<\/li><li>I want to install it in a lxd container behind haproxy (may write about the configuration in another post).<\/li><li>In short a sweet solution for most corporates.<\/li><\/ul>\n\n\n\n<h2>Solution<\/h2>\n\n\n\n<p>The solution is to use a repository manager like Nexus or Artifactory. I prefer open source versions to start with. <\/p>\n\n\n\n<p>So what are the good choices?<\/p>\n\n\n\n<h3>jFrog Artifactory<\/h3>\n\n\n\n<p>I downloaded the open source version and tried installing it. It was <strong>slow<\/strong>, very slow and confusing. There were myriad errors, the installation was complicated. In short, if I found it confusing inspite of copious documentation), you are very likely to. After couple of hours I decided it was not worth the pain.<\/p>\n\n\n\n<h3>Sonatype Nexus<\/h3>\n\n\n\n<p>Downloading was simple, running it was simpler. I installed it as systemd service. Only changes I had to do were:<\/p>\n\n\n\n<ul><li>Change user in nexus.service to ubuntu (default user in lxd)<\/li><li>Add one extra header in haproxy backend configuration:<br>http-request set-header X-Forwarded-Proto https<\/li><\/ul>\n\n\n\n<h4>Configuration<\/h4>\n\n\n\n<p>Only few changes were required to get Nexus up and running.<\/p>\n\n\n\n<ul><li>Removed anonymous access<\/li><li>Deactivated anonymous user<\/li><li>Changed admin password and added users<\/li><\/ul>\n\n\n\n<p>It works well with gradle and well documented. Best part is that it is significantly faster and satisfies all my requirements.<\/p>\n\n\n\n<h3>Winner?<\/h3>\n\n\n\n<p>The winner, for me, is Sonatype Nexus. It is fast, free, less cumbersome to install, setup and use. The default repositories serve my needs with minor tweaks.<\/p>\n\n\n\n<h2>Postscript<\/h2>\n\n\n\n<p>Could the slowness of Artifactory be due to https to http conversion as I use haproxy for SSL termination?<\/p>\n\n\n\n<p>That does not seem to be the case because I could load it properly, just slow.<\/p>\n\n\n\n<p>OTH: Nexus was not loading properly till I passed <strong>X-Forwarded-Proto<\/strong> header.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Requirements: I am writing several reusable libraries which need to refer each other in myriad ways, each may be worked upon by different developer. I don&#8217;t want to create a jumbo project with sub-modules where access control is a pita. I don&#8217;t want the repository to be publicly accessible. There should be fine-grained access control [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6,9,12],"tags":[156,144,159,155,157],"_links":{"self":[{"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/posts\/15857"}],"collection":[{"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/comments?post=15857"}],"version-history":[{"count":4,"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/posts\/15857\/revisions"}],"predecessor-version":[{"id":15861,"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/posts\/15857\/revisions\/15861"}],"wp:attachment":[{"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/media?parent=15857"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/categories?post=15857"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.taragana.com\/wp-json\/wp\/v2\/tags?post=15857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}