Skip to main content

Deploying Sonatype Nexus Repository

hashistack deploys Sonatype Nexus Repository in the following way:

General Deployments​

info

Please complete the general setup before proceeding.

Defining Packer Variables​

Create a HashiCorp Packer variable values file named "aws-kong.auto.pkrvars.hcl" under hashistack/hashicorp/sonatype-nexus-repository/images/aws directory with the following contents:

hashistack/hashicorp/sonatype-nexus-repository/images/aws/aws.auto.pkrvars.hcl
ami_region                       = "us-west-2"
ami_name                         = "my-nexus-ami"
instance_type                    = "t2.small"
sonatype_nexus_repository_domain = "nexus.mycompany.com"
ssl_cert_base64                  = "YXNkZnNnaHRkeWhyZXJ3ZGZydGV3ZHNmZ3RoeTY0cmV3ZGZyZWd0cmV3d2ZyZw=="
ssl_cert_key_base64              = "MzI0NXRnZjk4dmJoIGNsO2VbNDM1MHRdzszNDM1b2l0cmo="
  • ami_region is the image region where Nexus AMI will be published to. The published image will be private
  • ami_name is the name of the resulting AMI that will appear when managing AMIs in the AWS console or via APIs. This can be the same across builds, because hashistack will deregister the old AMI with the same name and replace it with the current built one
  • instance_type The AWS EC2 instance type to use while building the AMI
  • sonatype_nexus_repository_domain is the SSL-enabled domain that will serve the deployed HTTP Nexus instance
  • ssl_cert_base64 is a base64 encoded string of the content of SSL certificate file for the SSL-enabled domain, i.e. nexus.mycompany.com given the sonatype_nexus_repository_domain is nexus.mycompany.com
  • ssl_cert_key_base64 is a base64 encoded string of the content of SSL certificate file for the SSL-enabled domain, i.e. nexus.mycompany.com given the kong-api-gateway-domain is nexus.mycompany.com

Building AMI Image​

cd hashistack

cp hashicorp/common/images/aws/aws-builder.pkr.hcl hashicorp/sonatype-nexus-repository/images/aws
cp hashicorp/common/images/aws/aws-packer.pkr.hcl hashicorp/sonatype-nexus-repository/images/aws

cd hashicorp/sonatype-nexus-repository/images/aws
packer init .
packer validate .
packer build .
note

EBS volumes during build time will [automatically be removed][HashiCorp Packer delete_on_termination]

This will take a while and to save time, we can leave it here and proceed immediately to the next step.

Defining Terraform Variables​

Create a HashiCorp Terraform variable values file named "aws.auto.tfvars" under hashistack/hashicorp/sonatype-nexus-repository/instances/aws directory with the following contents:

hashistack/hashicorp/sonatype-nexus-repository/instances/aws/aws.auto.tfvars
aws_ec2_region   = "us-west-2"
ami_name         = "my-nexus-ami"
instance_type    = "t2.medium"
instance_name    = "My Nexus"
security_groups  = ["My Nexus Security Group A", "My Nexus Security Group B", "My Nexus Security Group C"]
route_53_zone_id = "MBS8YLKZML18VV2E8M8OK"
domain           = "nexus.mycompany.com"

  • aws_ec2_region is the EC2 runtime region where Kong will be deployed into

  • ami_name is the name of the published AMI; it must be the same as the ami_name in Packer variable file

  • instance_type is the AWS EC2 instance type used for deployed Nexus

  • instance_name is the deployed EC2 name as appeared in the instance list of AWS console; it can be arbitrary

  • security_groups is the list of AWS Security Group names to associate with (yes, not ID, but name...)

    info

    The standard HTTPS port 443 need to be open by configuring the inbound rules

  • sonatype_nexus_repository_domain is the SSL-enabled domain that will serve the Nexus

  • route_53_zone_id is the AWS Route 53 hosted Zone ID that hosts the domain nexus.mycompany.com

    tip

    To find the zone ID in AWS Route 53, we can:

    1. Sign in to the AWS Management Console
    2. Open the Route 53 console at https://console.aws.amazon.com/route53/
    3. Select Hosted zones in the navigation pane
    4. Find the requested ID in the top level Hosted Zones summary in the Route 53 section

Deploying to EC2​

caution

Depending on the AMI and EC2 configs, please be aware AWS credit charges shall incur after the following commands execute

When AMI image finishes building, we can go ahead to deploy that image as an EC2 instance:

cd ../../instances/aws

cp ../../../common/instances/aws/aws-ec2.tf .
cp ../../../common/instances/aws/aws-ssl.tf .
cp ../../../common/instances/aws/aws-terraform.tf .

terraform init
terraform validate
terraform apply -auto-approve

Deployment via Screwdriver CD​

hashistack supports deployment using Screwdriver CD. Please check it out.

Deployment via HACP​

tip

Please try our HACP platform to deploy a Nexus instance. It gives us one-click experience that helps us stand up a software artifactory in a minute.