I have Sonatype Nexus RepositoryOSS 3.74.0-05 and it crashes all the time and we are thinking to move to a new version or another alternative. Hows your experience?
Hey folks, I'm trying to evaluate the "new" Sonatype Nexus Community Edition.
However, the download page at https://www.sonatype.com/products/nexus-community-edition-download requires me to insert all sort of personal details (including the company name, what if I don't have one lol).
Understandably, I could insert random data, but I'm not sure if the download link is then sent to the email address.
That you know of, is there a known direct download link? Sonatype's website must be purposedly indexed like crap because I can't find anything useful there.
Yes, it is not a complicated task.
Install Nexus OSS on the same server. Do change the following so that the new Nexus OSS has the same configuration as the existing Nexus Professional runtime.
Configuration
- port is set in [runtime]/conf/nexus.properties
- sonatype-work directory location is set in [runtime]/conf/nexus.properties
- the java command is set in [runtime]/bin/jsw/conf/wrapper.conf
- the log directory location is set in [runtime]/conf/nexus.properties
Process
- Stop the Professional
- Make sure to backup the sonatype-work/nexus/conf directory
- Remove the professional plugins from sonatype-work/nexus/plugin-repository
- Add the p2 plugins for OSS to the sonatype-work/nexus/plugin-repository sonatype-work/nexus/conf/nexus.xml
- Remove procurement repositories references from nexus.xml
- Remove Scheduled task that use the professional plugins or features from from nexus.xml Note: Those two tasks could have been done from the Nexus Professional UI before stopping it.
- Remove User-Token-Realm from the sonatype-work/nexus/conf/security-configuration.xml
Start the Nexus OSS
- start preferably with nexus console instead of nexus start, so it shows more information
- check the [runtime]/logs/wrapper.log
- check the sonatype-work-nexus/logs/nexus.log
As a note: If your license to Nexus 3 Pro has expired, when you log in to the UI, you cannot access anything in the admin UI. You are only redirected back to the License screen with a stern warning message that you don't have a valid license.
I tried removing all Pro plugins etc as in the earlier answer. Tried finding where the Pro licenser was stored on file - but could not find any documentation from Sonatype of this. I assumed it was stored somewhere in the database.
In my case I worked with an evaluation server, so I removed the whole sonatype-work/nexus3 directory and restarted the nexus server. Even without data, it still claimed to be a Nexus Pro installation.
Finally I found the setting stored in the users home directory, in ~/.java/.userPrefs/com/sonatype of all places.
When that directory was removed/renamed I could start Nexus as a regular OSS.
It's not easy to find this in Sonatypes documentation, but they mention it in some places like: https://support.sonatype.com/hc/en-us/articles/213465018-Every-time-Nexus-is-restarted-it-asks-for-the-license-to-be-installed-
I have used both in enterprise settings a fair bit, but I had never really thought this through until reading the question. Artifactory seems much more complete/impressive to me, but I have used it more recently than Neuxs, so I was worried that I might be biased.
I just spent ~30 minutes reading online. Virtually every comparison or article is either totally biased (literally JFROG or Sonatype supported), or is just lacking in detail.
I eventually did find this though, which is fairly in line with my initial thoughts: https://www.praqma.com/stories/artifactory-nexus-proget/:
- Artifactory supports far more repository types.
- Atifactory has a far better REST API (and has often been ahead on feature development, though it seems like Nexus does catch up over time).
- Nexus is a little more extensible.
- Artifactory costs significantly more.
So... both are good. If you aren't amazingly cost conscious and want the best overall tool, probably choose artifactory. If you have specific needs and Nexus covers your required repository types, it might be worth using it to save some money as it is a solid product in the end.
Am using both right now.
Nexus will support more repo types with the free version than Artifactory
but
Artifactory will have more repos support in the paid tier
Nexus now support Conda natively (since a few weeks ago if memory serves)
Artifactory will be quite pricey, especially if you plan on having tests and staging instances to test out your config and/or custom plugins as you will have to shell for at least a Pro instance (3K+USD). Nexus will allow you to test most of these with the free version.
JFrog has exemplary support but a bit pushy with their sales. They will have help around though to get you started should you need it.
I have not tried Nexus support or sales force so I cant comment (the free version was plenty enough for our needs).
I found the plugin framework to be more usable with Artifactory though it felt a bit limited. Nexus seems more powerfull but it can be difficult to upgrade/remove plugins from a working instance. On that front I much preferred Artifactory.
Overall we did go with Artifactory, personally I find them to be pretty much equivalent. It will depend a bit on the actual technology you need supported (pypi, nuget, maven etc).