Sonatype Nexus is one of the best repository managers out there. It is some tool that you cannot avoid in your CI/CD pipeline. It effectively manages deployable artifacts.
Sonarqube requirements
- Minimum 1 VCPU & 2 GB Memory
- Server firewall opened for port 22 & 8081
- OpenJDK 8
- All Nexus process should run as a non-root nexus user.
Note: For production setup, please consider minimum production hardware requirements based on the nexus usage and data storage. Checkout the official system requirements document for detailed information
Sonatype Nexus 3 on Linux ec2
This article guides you to install and configure Sonatype Nexus 3 in a secure way on an ec2 Linux System.
Note: This was tested on a Redhat machine and it will work on Centos or related Linux flavours as well.
Step 1: Login to your Linux server and update it. Also install required utilities.
|
1 2 |
sudo yum update -y sudo yum install wget -y |
Step 2: Install OpenJDK 1.8
|
1 |
sudo yum install java-1.8.0-openjdk.x86_64 -y |
Step 3: Create a directory named app and cd into the directory.
|
1 |
sudo mkdir /app && cd /app |
Step 4: Download the latest nexus. You can get the latest download links fo for nexus from here.
|
1 |
sudo wget -O nexus.tar.gz https://download.sonatype.com/nexus/3/latest-unix.tar.gz |
Untar the downloaded file.
|
1 |
sudo tar -xvf nexus.tar.gz |
Rename the untared file to nexus.
|
1 |
sudo mv nexus-3* nexus |
Step 5: As a good security practice, it is not advised to run nexus service with any sudo user. So create a new user named nexus.
|
1 |
sudo adduser nexus |
Change the ownership of nexus files and nexus data directory to nexus user.
|
1 2 |
sudo chown -R nexus:nexus /app/nexus sudo chown -R nexus:nexus /app/sonatype-work |
Step 6: Open /app/nexus/bin/nexus.rc file
|
1 |
sudo vi /app/nexus/bin/nexus.rc |
Uncomment run_as_user parameter and set it as following.
|
1 |
run_as_user="nexus" |
Step 7: If you want to change the default nexus data directory, open nexus properties file and change the data directory “-Dkaraf.data” parameter to a preferred location as shown below. If you dont specify anything, by default nexus data directory will be set to /app/sonatype-work/nexus3
Tip: For production setup, it is is always better to mount the nexus data directory to a separate data disk attached to the server. So that backup and restore can be done easily.
|
1 |
sudo vi /app/nexus/bin/nexus.vmoptions |
An example configuration is shown below.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 |
-Xms2703m -Xmx2703m -XX:MaxDirectMemorySize=2703m -XX:+UnlockDiagnosticVMOptions -XX:+UnsyncloadClass -XX:+LogVMOutput -XX:LogFile=../sonatype-work/nexus3/log/jvm.log -XX:-OmitStackTraceInFastThrow -Djava.net.preferIPv4Stack=true -Dkaraf.home=. -Dkaraf.base=. -Dkaraf.etc=etc/karaf -Djava.util.logging.config.file=etc/karaf/java.util.logging.properties -Dkaraf.data=/nexus/nexus-data -Djava.io.tmpdir=../sonatype-work/nexus3/tmp -Dkaraf.startLocalConsole=false |
Running Nexus as a System Service
It is better to have systemd entry to manage nexus using systemctl. Follow the steps given below for the setup.
Create a nexus systemd unit file.
|
1 |
sudo vi /etc/systemd/system/nexus.service |
Add the following contents to the unit file.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 |
[Unit] Description=nexus service After=network.target [Service] Type=forking LimitNOFILE=65536 User=nexus Group=nexus ExecStart=/app/nexus/bin/nexus start ExecStop=/app/nexus/bin/nexus stop User=nexus Restart=on-abort [Install] WantedBy=multi-user.target |
Manage Nexus Service
Now we have all the configurations in place to run nexus.
Execute the following command to add nexus service to boot.
|
1 |
sudo chkconfig nexus on |
To start the Nexus service, use the following command.
|
1 |
sudo systemctl start nexus |
The above command will start the nexus service on port 8081. To access the nexus dashboard, visit http://:8081. You will be able to see the nexus homepage as shown below.
To log in, use the default username and password.
Default username is admin
You can find the default admin password in /app/sonatype-work/nexus3/admin.password file.
|
1 |
cat /app/sonatype-work/nexus3/admin.password |
For stopping,
|
1 |
sudo systemctl stop nexus |
For restarting,
|
1 |
sudo systemctl restart nexus |
You Might Like: How To Setup Latest Nexus OSS On Kubernetes
