Opened 4 years ago

Closed 4 years ago

Last modified 4 years ago

#2410 closed task (fixed)

artifact manager to replace

Reported by: jive Owned by: sac@…
Priority: normal Milestone: Sysadmin Contract 2020-I
Component: SysAdmin Keywords:


Planet has informed us that they would like to retire (an artifactory instance) used by the GeoServer project. The GeoServer PSC would like to ask OSGeo if it is possible to host an artifact manager on OSGeo hardware?

As discussed in 2019 (see this is a good oppertunity to setup an artifact manager to replace

There are two good options:

Change History (21)

comment:1 by jive, 4 years ago

This is a somewhat time sensitive activity as we would like to rescue the contents of (mostly prior release of GeoServer and GeoWebCache).

comment:2 by jive, 4 years ago

As noted in email discussion these repository managers can be configured to manage maven, docker, node, etc... and may be of interest to a sider group of osgeo projects.

comment:3 by wildintellect, 4 years ago

Possible: Yes How: we need some members to step up to set up a container dedicated to this purpose and hopefully have some expertise or at least time to vet the options.

comment:4 by robe, 4 years ago

jive -- as a clean replacement sounds like might be better to go with jfrog since that is what is using.

What does sonatype do additional that jfrog doesn't that would be a possible need?

I'd be willing to take a stab at installing it -- you have details of how we can pull over the artifacts from boundless?

comment:5 by jive, 4 years ago

Answering your question *What does sonatype do additional that jfrog doesn't that would be a possible need?*

Frog artifactory:

  • personal experience: easier administration screens to manage
  • Only supports java projects (Maven, Gradle and Ivy)
  • Used by (after a poor experience with cloud hosting)


  • personal experience: more complicated administration screens
  • This is the clear choice for OSGeo as it offers capabilities for more than just java projects (docker images, node packages, ruby, python, go, etc...)
  • Used by eclipse foundation (with their strong emphasis on control),

I have personally used both as an administrator (not installing but managing).


comment:6 by jive, 4 years ago

I think to copy the contents Tom Ingold did:

  1. Set up repo as a cache of old repo
  2. Have a script that accessed all the content via the new URL
  3. Turn of the "cache" and keep the content

comment:7 by jive, 4 years ago

So what happens next?

comment:8 by robe, 4 years ago


I'm planning to setup osgeo3 this week and thinking I would set up a container for nexus and jfrog.

I'm thinking maybe it would be easier if I setup jfrog first that way you have a clean migration from boundless? and then we can do nexus and slowly port over?

I don't think it's necessary for all projects to use the same thing so if you feel more comfortable with artifactory I'd say you should use that.

comment:9 by robe, 4 years ago

Milestone: Sysadmin Contract 2020-I

comment:10 by robe, 4 years ago

Jody - I setup nexus using the docker container from here - I sent you the login details

It's running in a dedicated LXD OS container so we could put other dockery stuff in there you need.

It's running on the new osgeo3 lxd host I set up today.

comment:11 by robe, 4 years ago

nexus supports LDAP so I configured it to use OSGeo LDAP and set jive, wildintellect, strk as an admins.

There is a setting in the LDAP config to use LDAP groups for role management. But I wasn't sure if we wanted to do that for the first go round.

comment:12 by robe, 4 years ago

based on popular demand I have added as an alias for

we can get rid of nexus but that's what the container is called and the config I have at moment and some other names were proposed like, etc.

comment:13 by jive, 4 years ago

Thanks for the hard work, I am collecting notes on how to transfer content.

  1. webdav

This script would like to be run on osgeo machine hosting webdav folder.

This replies on direct file system access and should be fairly quick.

Once content is migrated we can redirect -->

  1. to

This maven repository provisioner can be run from anywhere, and just uses maven API.

I expect this will be quite bandwidth intensive, as such I would prefer to run this script on osgeo hardware.

  1. when complete

Update the builds for osgeo projects and communicate the change to downstream applications

comment:14 by robe, 4 years ago

jive are you all set here? Last we discussed you had root access to nexus container and download container and can install anything you need on the nexus container.

I also want to do an upgrade of nexus install to deal with vulnerability that was announced a couple of days ago. I'm not sure you have any groovy scripts so may be a non-issue.

comment:15 by robe, 4 years ago

I did the upgrade on nexus.

comment:16 by jive, 4 years ago

Tom Ingold was able to transfer content from ​ to Geoserver-releases (no idea why that ended up with a capital but it does not matter so much as it mostly an internal detail). The maven repository provisioner did not work, but he was able to figure some scripts out (wget, find, xargs and curl).

Initial testing found that some things were missed (apache beanutils) so some testing is needed.

comment:17 by jive, 4 years ago

I have written up a wiki page describing how projects can join the repository.

We have our initial builds working from GeoTools, I think this issue can be closed!

comment:18 by jive, 4 years ago

aside: I was able to complete migrating contents from webdav folder.

Should we make plans to shutoff that webdav folder, or redirect to ?

comment:19 by robe, 4 years ago

Resolution: fixed
Status: newclosed

in reply to:  18 comment:20 by robe, 4 years ago

Replying to jive:

aside: I was able to complete migrating contents from webdav folder.

Should we make plans to shutoff that webdav folder, or redirect to ?

Yes we should -- you going to be at next SAC meeting? maybe we can have a working meeting

comment:21 by strk, 4 years ago

Would users have a benefit from redirect ? If so please go for it !

Note: See TracTickets for help on using tickets.