October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

Nexus Repository 2 Guide for Linux Foundation Projects: Maven, Jenkins, and Migration

A practical guide to the Nexus Repository 2 model used by Linux Foundation projects: releases, snapshots, groups, Jenkins publishing, permissions, automation, and the post-2025 migration imperative.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Linux Foundation projects use Nexus Repository Manager 2 to store Maven and Java artifacts, with Jenkins jobs publishing releases and snapshots. For existing LF infrastructure, the key pieces are the repository layout, Maven and Jenkins configuration, and project-specific deployment permissions. Nexus Repository 2 support ended on June 30, 2025, so this is legacy operating guidance—not a reason to start a new Nexus 2 deployment. Plan migration to Nexus Repository 3.

What Nexus 2 does in LF project infrastructure

Nexus Repository Manager 2 serves as an artifact repository: it stores release and snapshot artifacts and provides access to dependencies. In the Linux Foundation Release Engineering model, Jenkins is the publication interface. A Jenkins job can publish on a schedule or when requested, depending on its Jenkins Job Builder configuration. The guide describes this architecture for LF projects; it does not establish the current configuration or status of any particular project.

As an Amazon Associate I earn from qualifying purchases.

Repository endpoints follow this pattern: https://nexus.example.org/content/repositories/<repo-name>. Replace the host and repository name with the values for the project’s Nexus instance and target repository.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Which repository should Maven use?

Nexus 2 repositories differ by whether they store artifacts directly, aggregate other repositories, or proxy an upstream source. Choose based on whether the project is publishing, consuming, or staging artifacts.

Repository Type and purpose Operational distinction
Releases Hosted repository for official release artifacts. Redeployment is disabled to prevent overwriting released versions.
Snapshots Hosted repository for Maven snapshot builds. Snapshot versions use the -SNAPSHOT suffix.
Public Repositories Group repository providing a combined view of release repositories. Use a group view when consumers need an aggregated endpoint rather than a specific hosted repository.
Staging Repositories Group repository providing a combined staging view. If two staging repositories contain the same version, the oldest staging repository takes precedence.
Proxy Repository that proxies artifacts from an upstream repository. It provides access to upstream artifacts through Nexus rather than holding project releases directly.

The LF guide’s Maven example references releases, staging, and snapshots repositories through URLs based on ${project.nexus.url}/content/repositories/.... The exact repository name and project endpoint must match the Nexus instance’s configuration.

How to configure Maven and Jenkins publication

Reference repository URLs in the Maven project

In the Gerrit repository’s pom.xml, configure the relevant repository IDs and URLs for releases, staging, and snapshots. The URL pattern is ${project.nexus.url}/content/repositories/<repo-name>. Keep the repository IDs consistent with the server entries Jenkins uses; Maven relies on those IDs to match repository configuration with credentials.

Provide matching server entries to Jenkins

Jenkins settings files contain a ServerId entry for each Nexus 2 repository the job can access. Configure the IDs required by the job and ensure the corresponding credentials have the intended repository privileges. Jenkins then runs the Maven publication workflow on the schedule or trigger defined by the job’s Jenkins Job Builder configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Browsing and deployment are separate permissions. The LF guide says ordinary users can browse repositories and proxies anonymously, while LF administrators and release-engineering staff authenticate for administrative options. A project’s CI account needs the appropriate deployment privileges to upload; anonymous read access does not grant write permission.

How LF project permissions are organized

The LF convention creates a Nexus user for each Gerrit repository and names related roles and privileges after that repository. The guide lists read, create, delete, and update privileges, along with an LF Deployment Role for deploying to Snapshots and Releases. Projects using autorelease staging may also need a Staging Deployer privilege.

Bootstrap configuration in the LF documentation includes server settings, LDAP settings, external role mapping, administrator-role assignment, disabling the default deployment account, and creating an lf-deployment role. That role combines Artifact Upload, Nexus Deployment Role, and Unpack. These are documented configuration patterns, not confirmation that a given LF project currently uses them.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Automate repository setup with lftools

lftools nexus create repo automates creation of Nexus repository resources from configuration files. The repository configuration describes the project hierarchy, passwords, global privileges, and additional privileges. A separate settings configuration supplies the Nexus URL and administrative credentials.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The command can create repositories, users, roles, privileges, and repository-target patterns. Those target patterns restrict the GroupIds a project may publish, providing a way to limit deployment scope. Use the configuration and credentials appropriate to the intended project and instance; the documented command is an automation mechanism, not a substitute for reviewing access policy.

Upload failures and the SNI hostname mismatch

The LF infrastructure documentation records an upload failure involving nexus-staging-maven-plugin and an SSL hostname mismatch. The documented cause is that Nexus 2 does not support Server Name Indication (SNI). It describes cURL as a workaround that can ignore the certificate mismatch, but that should not be treated as a generally safe fix: ignoring certificate validation weakens connection security. Review the applicable security policy and environment before using such a workaround, and favor a supported endpoint or migration path where available.

Nexus 2 support ended: plan the Nexus 3 migration

Sonatype’s support notice says Nexus Repository 2 entered extended maintenance and that support for all Nexus Repository 2 versions ended on June 30, 2025: Sonatype Support: Nexus Repository 2 Extended Maintenance. The Nexus Repository 2 Help manual likewise gives June 30, 2025 as the sunset date and recommends migration to Nexus Repository 3: Nexus Repository 2 Help.

For teams maintaining an existing LF Nexus 2 integration, preserve the operational details needed to understand current Maven endpoints, Jenkins server IDs, repository types, and deployment roles while planning migration. The cited guidance establishes the end-of-support date and direction to migrate; it does not specify a migration procedure, compatibility mapping, or the status of an individual LF project. Confirm those details against the project’s current Nexus and release-engineering configuration before changing publication workflows.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.