40

Is there some hosting solution, be it paid or free, that offers explicit maven repository hosting for non-public artifacts, preferably with support?

These are the alternatives I'm aware about:

However, all of these either require some maintenance overhead beyond just using the repository manager (beyond just using nexus) and/or are not really fully supported solutions, or are not meant for closed-source projects.

If I need to have a solution that is available on the internet but it is "private" as it should be available for the people of the Company only, are there some other alternatives? I'm assuming here that there is no server that is already public, so having a new server just for maven artifact hosting seems a bit big. I'm a bit surprised that I was unable to find commercial alternatives.

Community
  • 1
  • 1
eis
  • 51,991
  • 13
  • 150
  • 199
  • Vcs and GitHub hosting is just plain wrong. You *need* a repository manager – Stephen Connolly Sep 21 '12 at 08:42
  • What "maintenance overhead" you see in Amazon S3? – yegor256 Sep 21 '12 at 10:39
  • 2
    @yegor256 basically, you don't get just a repository manager, but you need to think about the whole server. You are in charge of being up to date with updates, runtime health checks and stuff like that. Amazon can provide tools for it but it is still something that someone has to act on. It's not like they guarantee that a repository manager service is operational, they'll just try to ensure that their end of the bargain (servers etc) work. – eis Sep 21 '12 at 10:46
  • I think you misunderstand how Amazon S3 works. There are no servers, and yes, there is a guarantee of service availability. – yegor256 Sep 21 '12 at 12:44
  • @yegor256 that might be, as I haven't used it. So they'll guarantee that a repo manager will work, and keep it up-to-date with any updates there might be? Would it be a repository manager software there, with UI, or is it just a storage of files, like a VCS solution would? – eis Sep 21 '12 at 13:24
  • S3 is just a storage of objects (not necessarily files). It doesn't know that it's a Maven repository. Your client-side client implements necessary functionality (Maven S3 wagon provider, as explained [here](http://stackoverflow.com/questions/850570/maven-s3-wagon-provider)). – yegor256 Sep 21 '12 at 15:00
  • Yes, that's in line with how I thought it would be. So basically maintenance overhead would be implementing and maintaining the client-side functionality, and the solution as such is not supported beyond storage - the maven repo usage is not guaranteed to work. – eis Sep 21 '12 at 15:20
  • note to myself: bintray seems to [offer something similar](https://bintray.com/account/pricing) – eis Oct 05 '14 at 10:30
  • Another note: see this [related question](https://stackoverflow.com/questions/12410423/how-do-i-setup-a-private-remotely-accessible-maven-repository) – eis Mar 17 '18 at 07:44

8 Answers8

14

I'm developer of mymavenrepo.com - it's very simple maven hosting which perfectly fits for personal use and small companies

fedor.belov
  • 22,343
  • 26
  • 89
  • 134
8

Jfrog offer their artifactory repository manager as a cloud service.

Personally some of the default configuration choices ("fixing" metadata, etc) are just plain wrong, but you can configure it to do the right thing.

(Full disclosure: both jfrog and sonatype are partners of cloudbees (my employer))

Edit: They offer a 30-day trial, and their pricing can be seen here.

eis
  • 51,991
  • 13
  • 150
  • 199
Stephen Connolly
  • 13,872
  • 6
  • 41
  • 63
5

JitPack is a services that makes it easy to host non-public (private) Maven artifacts.

The way it works is that it builds your private Git repositories from source and publishes resulting artifacts. The artifacts are only accessible to you and those who have access to Git repo itself, like people in your company.

The way you use it is by adding the repository and point your dependencies at the Git Repo:

  1. Add repository:
<repository>
    <id>jitpack.io</id>
    <url>https://jitpack.io</url>
</repository>
  1. Add dependency
<dependency>
    <groupId>com.github.User</groupId>
    <artifactId>Repository</artifactId>
    <version>Tag</version>
</dependency>

More information and authentication in the docs. Their pricing can be seen on their pricing page.

eis
  • 51,991
  • 13
  • 150
  • 199
Andrejs
  • 26,885
  • 12
  • 107
  • 96
2

I've been searching for this as well and came acrosss this link https://blog.openshift.com/nexus-repository-manager-in-the-cloud-for-free-with-openshift/ which explains how to set up a Nexus application on OpenShift. I followed the steps outlined in this page and got it up and running pretty quickly. You can disble the "anonymous" user to remove public access and set up your own users. It can tie into LDAP you have that available.

Rob Baily
  • 2,770
  • 17
  • 26
2

It seems there is a service called deps about to open in 2017. From their description, it sounds like the answer to my question, but we'll have to see how it turns out.

eis
  • 51,991
  • 13
  • 150
  • 199
2

This might be considered a promotion, but we just released support for hosting Maven repositories in the cloud at Deveo. There is no other information available yet than the release blog post. The pricing, however, should be more friendly than what jFrog offers.

Disclaimer: I'm affiliated with the company.

kontulai
  • 876
  • 5
  • 19
  • 1
    Nice, and about the " $75/month for the min service" stated above, here it looks more like free until 1GB and then 1€/GB/month. – Tristan May 04 '17 at 10:44
1

There is no commercial offering of Nexus Repository in the cloud as such, but any managed server that includes the features to run a Java application is suitable. And there are LOTS of them around. And others partners like CA automatically include it in a stack they provision for customers.

The only overhead you are going to have to manage is to install and run Nexus Repository. That however is trivial and can be done within a couple of minutes.

Depending on your usage you could even run this on a VM that you turn off when no one needs it. E.g. out of 24 hours a day .. if your dev and CI servers only need it for 12 .. shut the VM down the rest of the time. And you can automate that all easily as well.

Manfred Moser
  • 29,539
  • 13
  • 92
  • 123
  • 2
    I disagree on effort being trivial - it might be for installation, but not for continuous maintenance. I think this question is looking for managed solutions with enterprise support. – eis May 25 '16 at 08:00
  • Nexus Repository is very hands off and low maintenance once installed and if you get a Pro license you have full support for Sonatype for whatever youtinstallation is. Cloud or not or a mixture. A license gives you the ability to run as many installations as you want. – Manfred Moser May 25 '16 at 14:11
  • 1
    Have to add that in my current project, we've now been without builds for several weeks since nexus metadata updates are broken and our in-house support says they are unable to fix it. This hilights the point that it needs proper support. – eis Mar 23 '17 at 08:25
-2

DropBox is another possible option see https://code.google.com/p/peter-lavalle/wiki/MavenOnDropBox

ams
  • 60,316
  • 68
  • 200
  • 288
  • 4
    the instructions refer to using dropbox as a public repo, where all artifacts would be visible for the world. With this question I was looking for hosting for non-public artifacts, and preferrably with support. – eis Oct 13 '13 at 08:25
  • The question does specifically refer to "non-public artifacts" with support – Michael C Good Jul 25 '18 at 20:10