Sonatype Container Deployment - Nexus Repository

Sonatype Container Deployment - Nexus Repository

Sonatype provides templates and Docker images for the following cloud providers and tools.

Docker Hub

Docker images are available on Docker Hub and are delivered from an associated GitHub repository.

Nexus Repository Manager

Supported Docker image platforms

The sonatype/nexus3 Docker image is published as a multi-platform Linux image. Current Sonatype-published latest, current versioned, -alpine, and -ubi tags support the following platforms:

Platform Description
linux/amd64 Linux on x86-64 / Intel / AMD 64-bit systems
linux/arm64 Linux on ARM64 / AArch64 systems

The default sonatype/nexus3:latest and sonatype/nexus3:<version> tags are Alpine-based. Explicit Alpine tags use <version>-alpine; UBI-based variants use <version>-ubi.

Docker automatically selects the image variant that matches the host platform when pulling a multi-platform tag. To request a specific platform, use the Docker --platform option.

docker pull sonatype/nexus3:latest
docker pull --platform linux/arm64 sonatype/nexus3:latest
docker pull --platform linux/amd64 sonatype/nexus3:latest

For pinned versions, use the same pattern:

docker pull --platform linux/arm64 sonatype/nexus3:<version>

This platform support applies to current Sonatype-published tags. Some older image tags may support fewer platforms. Before pinning an older tag, check the Docker Hub tag list or inspect the image manifest:

docker buildx imagetools inspect sonatype/nexus3:<tag>

Helm Charts for Kubernetes

A Helm Chart ( GitHub, ArtifactHub) is available for our resiliency and high-availability deployment options. Be sure to read the deployment instructions in the associated README file before using the chart.

NEW in 3.93

Helm chart 93.0.0 and later includes optional ephemeral storage for /nexus-data/log and /nexus-data/tmp. Use the ephemeralStorage block only when logs are forwarded externally because data is deleted when pods restart, are evicted, or are rescheduled.

Helm chart 93.0.0 and later includes optional HPA support for clustered Nexus Repository HA deployments. Use the hpa block to scale pods by CPU or memory after metrics-server is installed.

Helm chart 93.0.0 and later supports Azure Workload Identity with External Secrets Operator for syncing Azure Key Vault secrets into Kubernetes Secrets. Configure this with the serviceAccount and externalsecrets blocks.

Red Hat OpenShift

Note
As explained in our Feature Sunsetting documentation, Sonatype does not recommend using the OrientDB container/operator due to data corruption risks when running the embedded OrientDB database inside container orchestration (Kubernetes, OpenShift). The container/operator for OrientDB deployments will be officially sunset on December 15, 2023.

At the links below, the OrientDB container/operator is called "Nexus Repository Certified Operator" and "Nexus Repository Certified Operator Bundle." This notice and the official sunset only apply to these two items.

The "Nexus Repository HA Certified Operator" and "Nexus Repository HA Certified Operator Bundle" are new, work with a PostgreSQL database, and will continue to be supported and maintained.

Certified containers are available through the Red Hat Container Catalog.

Kubernetes Operators are available in the OpenShift OperatorHub for installing servers into OpenShift. Search inside your running OpenShift cluster's Operator Hub to find them.

Mesosphere DC/OS

Sonatype Nexus Repository is offered through the Mesosphere DC/OS Universe

This offering is available through the DC/OS user interface. The templates are available via mesosphere/universe.

Iron Bank

Hardened containers are available through Iron Bank, a central repository of digitally signed container images accredited by the US Department of Defense (DoD).