# Sonatype Container Deployment - Nexus Repository

Sonatype provides templates and Docker images for the following cloud providers and tools.

## Docker Hub

Docker images are available on Docker Hub and are delivered from an associated GitHub repository.

Nexus Repository Manager

- [Docker Hub sonatype/nexus3](https://hub.docker.com/r/sonatype/nexus3/)
- [GitHub sonatype/docker-nexus3](https://github.com/sonatype/docker-nexus3)

### Supported Docker image platforms

The `sonatype/nexus3` Docker image is published as a multi-platform Linux image. Current Sonatype-published `latest`, current versioned, `-alpine`, and `-ubi` tags support the following platforms:

| Platform         | Description                                                |
|------------------|------------------------------------------------------------|
| `linux/amd64`    | Linux on x86-64 / Intel / AMD 64-bit systems              |
| `linux/arm64`    | Linux on ARM64 / AArch64 systems                           |

- These are Linux container images. Windows container images are not published for this image.

- Platform support refers to the container image runtime platform, not to every possible host OS, Kubernetes distribution, or cloud instance type.

- Use current Docker and container runtime versions that support multi-platform images.

- Third-party or community images are outside the scope of Sonatype-published Docker image support.

- For Nexus Repository, supported image platforms do not replace the documented system requirements, sizing guidance, storage requirements, or persistent data recommendations.

The default `sonatype/nexus3:latest` and `sonatype/nexus3:<version>` tags are Alpine-based. Explicit Alpine tags use `<version>-alpine`; UBI-based variants use `<version>-ubi`.

Docker automatically selects the image variant that matches the host platform when pulling a multi-platform tag. To request a specific platform, use the Docker `--platform` option.

```
docker pull sonatype/nexus3:latest
docker pull --platform linux/arm64 sonatype/nexus3:latest
docker pull --platform linux/amd64 sonatype/nexus3:latest
```

For pinned versions, use the same pattern:

```
docker pull --platform linux/arm64 sonatype/nexus3:<version>
```

This platform support applies to current Sonatype-published tags. Some older image tags may support fewer platforms. Before pinning an older tag, check the Docker Hub tag list or inspect the image manifest:

```
docker buildx imagetools inspect sonatype/nexus3:<tag>
```

## Helm Charts for Kubernetes

A Helm Chart ( [GitHub](https://github.com/sonatype/nxrm3-ha-repository/tree/main/nxrm-ha), [ArtifactHub](https://artifacthub.io/packages/helm/sonatype/nxrm-ha)) is available for our resiliency and high-availability deployment options. Be sure to read the deployment instructions in the [associated README file](https://github.com/sonatype/nxrm3-ha-repository/blob/main/nxrm-ha/README.md) before using the chart.

NEW in 3.93

Helm chart 93.0.0 and later includes optional ephemeral storage for `/nexus-data/log` and `/nexus-data/tmp`. Use the `ephemeralStorage` block only when logs are forwarded externally because data is deleted when pods restart, are evicted, or are rescheduled.

Helm chart 93.0.0 and later includes optional HPA support for clustered Nexus Repository HA deployments. Use the `hpa` block to scale pods by CPU or memory after metrics-server is installed.

Helm chart 93.0.0 and later supports Azure Workload Identity with External Secrets Operator for syncing Azure Key Vault secrets into Kubernetes Secrets. Configure this with the `serviceAccount` and `externalsecrets` blocks.

## Red Hat OpenShift

**Note**  
As explained in our [Feature Sunsetting documentation](https://help.sonatype.com/en/sonatype-nexus-repository-3-feature-status.html), Sonatype does not recommend using the OrientDB container/operator due to data corruption risks when running the embedded OrientDB database inside container orchestration (Kubernetes, OpenShift). The container/operator for OrientDB deployments will be officially sunset on December 15, 2023.

At the links below, the OrientDB container/operator is called "Nexus Repository Certified Operator" and "Nexus Repository Certified Operator Bundle." This notice and the official sunset only apply to these two items.

**The "Nexus Repository HA Certified Operator" and "Nexus Repository HA Certified Operator Bundle" are new, work with a PostgreSQL database, and will continue to be supported and maintained.**

Certified containers are available through the Red Hat Container Catalog.

- [RHCC for Sonatype Nexus Repository](https://catalog.redhat.com/software/container-stacks/detail/62f4199c2eb63f74c2bff1cc)

Kubernetes Operators are available in the OpenShift OperatorHub for installing servers into OpenShift. Search inside your running OpenShift cluster's Operator Hub to find them.

- [Operator for Sonatype Nexus Repository](https://catalog.redhat.com/software/container-stacks/detail/62fe81a9059b5d754ae0198b)

## Mesosphere DC/OS

Sonatype Nexus Repository is offered through the Mesosphere DC/OS Universe

This offering is available through the DC/OS user interface. The templates are available via [mesosphere/universe](https://github.com/mesosphere/universe/tree/version-3.x/repo/packages/N/nexus).

## Iron Bank

Hardened containers are available through Iron Bank, a central repository of digitally signed container images accredited by the US Department of Defense (DoD).

- [Iron Bank for Nexus Repository](https://repo1.dso.mil/dsop/sonatype/nexus/nexus)