Nexus Repository Manager OSS by Sonatype

Explore the recent database changes in Nexus Repository Manager OSS, including abandoning Orientdb, enabling embedded H2 for free users, and migration options to Postgres for paid setups.

Identify installation prerequisites for Nexus Repository Manager across Windows, Linux, and macOS, including a dedicated non-root user, file limits, Java version guidance, and PostgreSQL sizing for larger deployments.

Set up Nexus repository manager on Ubuntu with OpenJDK, create a dedicated Nexus user, configure /opt/nexus, and enable a systemd service for first login with the one-time password.

Install Nexus repository manager by provisioning Java OpenJDK 17, creating Nexus user, downloading and extracting the package, setting up systemd service, starting Nexus, and logging in with a one-time password.

Explore why ssl tls are needed for nexus, and how to add certificates via jetty, a reserved proxy like nginx, or cloud load balancers to secure traffic.

Enable tls ssl in nexus by converting keys to pkcs12 format, generating a Jetty-readable keystore, configuring jetty https, and verifying encrypted access.

Expose nexus via an nginx reverse proxy with ssl, redirect http to https on port 80 and 4043, enable the site, restart nginx, and log in as administrator.

Configure an aws application load balancer with a target group and https listener, attach a certificate from acm, and route a custom domain via dns to the nexus instance.

Discover how blob stores in Nexus logically segment binary large objects, including Java artifacts and Docker layers, while obfuscated files and metadata in H2, Postgres, or OrientDB map content.

Learn about file, AWS S3, Azure Cloud Storage, Google Cloud Storage, and group blob stores in Nexus Repository Manager, with compact blob store and soft quotas.

Log in to the nexus instance, open blob stores in settings, and configure S3 with region, bucket name, prefix, expiration, or file blob stores with path, then save.

Explore Nexus repository types—hosted, proxy, and group—and their formats, including Maven2, npm, pypi, docker, apt, yum, helm, and NuGet, noting that format support varies by version.

Explore hosted repositories in Nexus Repository Manager OSS, learning how to store and share artifacts—including docker layers—no longer available on the web, with developers and CI/CD tooling.

Learn how proxy repositories mirror and cache artifacts to reduce external traffic, speed up access, and keep artifacts available when third-party repositories are down, with read-only proxy behavior.

Explore how group repositories unify multiple repos under one endpoint, enabling read access while writes stay on hosted repos; writing to the group is available in the pro version.

Compare Docker repositories with other formats in Nexus, showing the need for dedicated ports per repository and Docker-specific exposure for http or https.

Create a docker hosted repository in Nexus, configure the http listener on port 5000, skip https for now, and use the default blobstore.

Learn how to create and configure a docker proxy repository in Nexus, including proxy remote storage, Docker Hub, foreign layer caching, auto blocking, blobstore, and port 5001.

Shows how to create a docker group repository in Nexus, add hosted and proxy members, and set an http listener on port 6000, with ports 5000 and 6000 open.

Create a Python hosted repository in Nexus Repository Manager OSS by selecting PyPI host, naming it PyPI-repo, using the default blob store, and optionally adjust deployment policy.

Create a Python proxy repository by selecting PyPI proxy, naming it PyPI dash proxy, and configuring remote storage, trust store, block options, refresh intervals, negative cache, and the provided address.

Create a PyPI group repository by selecting PyPI Group, naming it PyPI dash group, and choosing blobstore; set member repos with a top-down search order to access all under endpoint.

Demonstrates building a Python package with the build tool, publishing via twine to a Nexus hosted repository, and configuring pip to install through the Nexus group for caching and downloads.

Enable https ports on Nexus with the Jetty server, login to Docker registries, pull images via the proxy group, and push a built image to the hosted registry.

Use nginx as a TLS reverse proxy to expose nexus docker endpoints, map docker hosted and group repositories, and push and pull images through the secured Nexus setup.

Switch to tls via nginx subdomains to secure docker registry access. Remove ports 7000 and 7001, then use push and pull domains for repositories.

Explore managing repositories by applying cleanup policies to remove old artifacts and docker images. Discover routing rules, content selectors, and privileges for granular access management and secure repository access.

Configure Nexus cleanup policies to automatically remove outdated components by criteria such as age, usage, release type, and asset name matcher, and run blobstore compact tasks to reclaim space.

Create a Python cleanup policy in Nexus Repository Manager OSS by selecting the PyPI format, naming it, and configuring component age, last used, and an asset name matcher.

Create and apply Docker cleanup policies for Docker hosted and Docker proxy repositories, choosing cleanup criteria based on component usage and asset name patterns.

Explore routing rules for proxy repositories to allow or block traffic to specific paths or artifacts. Test matchers with regex and use path tester to validate configurations before saving.

Create and configure routing rules in Nexus, including naming, descriptions, and selecting allow or block modes with multiple matchers. Test paths with the tester and apply rules to proxy repositories.

Explore content selectors in nexus to grant granular access by selecting specific formats and paths, using privileges to restrict artifacts like maven, docker, and npm.

Explore Nexus security basics by examining privileges, roles, users, and configuration, including realms and SSL certificates used for service connections, and apply least access with Maven admin and developer roles.

Learn how privileges work in Nexus, using built-in and custom permissions across application, repository admin, content selector, repository view, and scripts, with wildcards and action-based access.

Learn how rows group privileges into nested roles in Nexus, including predefined roles like annex admin and annex anonymous, and how external role mapping with LDAP simplifies permissions.

Learn how nexus manages local users by manually creating them with id and login, first name, second name, email, and password, then set status and map to roles and privileges.

Enable anonymous access in Nexus by configuring the predefined anonymous user and its role for unauthenticated access, then prefer per-user accounts for traceable actions and logs.

Configure LDAP in Nexus to centralize user management, map LDAP groups to Nexus roles, and enable LDAP realm for access to Docker images and Maven artifacts.

Explore realms in Nexus to define authentication sources and prioritize access for users, including local authentication, ldap, docker bearer token, and default role realms.

Learn how Nexus uses the Java trust store to validate connections and manage self-signed certificates by importing them into the Nexus SSL certificate store for Docker and LDAP.

Explore how to manage privileges, roles, and users in Nexus, including creating roles, applying Docker repo admin privileges, and understanding wildcard and content selectors.

Explore system administration for Nexus Repository Manager, access Nexus settings via the rest api, automate tasks, configure email notifications, and customize capabilities with extra features.

Learn how rest api in nexus enables client-server communication via http methods to perform create, read, update, and delete operations on resources using json data, with statelessness and open api.

Configure the Nexus email server to send alerts using a third party SMTP server. Set host, port, certificate, authentication, from address, and subject prefix; explore monitoring endpoints and Prometheus data.

Explore Nexus repository tasks, predefined administrative operations for Docker, Maven, PyPI, and statistics, including blob store compaction and checksum generation. Handle task frequency and email notifications.

Explore Nexus capabilities as configurable features that enable or disable functions, customize the user interface, and tailor settings like audit, scheduler, storage checks, and webhooks.

Cache nexus to nexus with a global central and local read-only caches to speed access to hosted and proxy repositories, improving latency and resilience across environments.

Set up a second nexus cache with a dedicated directory and port 8082, then demonstrate docker cache by pulling an image through the central nexus.

Learn how to pull docker images from a Nexus hosted registry using Docker and Kubernetes, including configuring connectivity, credentials, and image pull secrets via docker config and Kubernetes secrets.

Explore accessing a local Nexus from Docker containers and Minikube on a single host, using docker add host and the host.minikube.internal domain.

Learn to run a Nexus instance on Docker using the official Sonatype image, configure a data volume, map ports 8082 and 9001, and log in with the temporary admin password.

Demonstrates caching Nexus images across dockerized and local instances by configuring a Docker proxy in Nexus, enabling Docker bearer token realm, and validating cross-container image pulls and multi-level caching.

Learn to access Nexus from Kubernetes using Minikube by creating a read-only puller role and a Nexus docker secret for image pulls.

Evaluate whether upgrading to Nexus Pro improves performance and reliability through high availability, multi-node setups, enhanced blobstores, external PostgreSQL, and controlled artifact promotion and security features.

Celebrate completing the course and keep practicing with Nexus Repository Manager OSS by setting up, testing, and experimenting to master the system.