# Best Practices **URL:** https://community.sonatype.com/c/nexus-repository/best-practices/55.md [Latest](https://community.sonatype.com/latest.md) · [Categories](https://community.sonatype.com/categories.md) · [Tags](https://community.sonatype.com/tags.md) --- ## [About the Best Practices category](https://community.sonatype.com/t/about-the-best-practices-category/6710)
**Author:** [@mfrost](https://community.sonatype.com/u/mfrost)\ **Replies:** 0
A place to discover and discuss best practices for using Sonatype Nexus Repository. --- ## [How to upload a heavy .tar.bz2 package in a conda repository ?](https://community.sonatype.com/t/how-to-upload-a-heavy-tar-bz2-package-in-a-conda-repository/16574)
**Author:** [@thierry.brizzi](https://community.sonatype.com/u/thierry.brizzi)\ **Replies:** 1\ **Last updated:** [August 26, 2026, 2:02pm UTC](https://community.sonatype.com/t/how-to-upload-a-heavy-tar-bz2-package-in-a-conda-repository/16574 "2026-08-26T14:02:48Z")
Hello, I cannot upload a 50MB .tar.bz2 package. Here’s the error in nexus.log: 2026-08-26 11:47:23,764+0200 ERROR \[qtp468666864-24891\] org.sonatype.nexus.coreui.UploadResource - Unable to perform upload to repository… --- ## [Are there official STIGs or hardening guidelines available for Sonatype Nexus Repository?](https://community.sonatype.com/t/are-there-official-stigs-or-hardening-guidelines-available-for-sonatype-nexus-repository/16258)
**Author:** [@mikojack](https://community.sonatype.com/u/mikojack)\ **Replies:** 2\ **Last updated:** [April 23, 2026, 12:29pm UTC](https://community.sonatype.com/t/are-there-official-stigs-or-hardening-guidelines-available-for-sonatype-nexus-repository/16258 "2026-04-23T12:29:15Z")
Hello, We are currently evaluating Sonatype Nexus Repository for enterprise-wide use and are working on aligning the product with our internal security and compliance requirements. As part of this process, we would lik… --- ## [Application Health Check required permissions for role assignment](https://community.sonatype.com/t/application-health-check-required-permissions-for-role-assignment/16188)
**Author:** [@Joey\_Officer](https://community.sonatype.com/u/Joey_Officer)\ **Replies:** 2\ **Last updated:** [March 25, 2026, 6:17pm UTC](https://community.sonatype.com/t/application-health-check-required-permissions-for-role-assignment/16188 "2026-03-25T18:17:36Z")
I’ve created a new user to perform health checks against the application, using the following permissions: nx-healthcheck-read nx-healthcheck-summary-read nx-healthcheck-update When I attempt to hit the healthcheck end… --- ## [Nexus H2 repair steps for version 3.79](https://community.sonatype.com/t/nexus-h2-repair-steps-for-version-3-79/16116)
**Author:** [@Glen\_Rodrigues](https://community.sonatype.com/u/Glen_Rodrigues)\ **Replies:** 3\ **Last updated:** [March 3, 2026, 3:21pm UTC](https://community.sonatype.com/t/nexus-h2-repair-steps-for-version-3-79/16116 "2026-03-03T15:21:29Z")
Hello Team, I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. Environment: Nexus Version: 3.79.1 H2 Version: 2.2.224 Java Version: 11 Deployment: \*\*OpenShift \*\* Steps i am per… --- ## [RAW Repository Powershell Helpfiles](https://community.sonatype.com/t/raw-repository-powershell-helpfiles/16103)
**Author:** [@Holger\_Huettmann](https://community.sonatype.com/u/Holger_Huettmann)\ **Replies:** 1\ **Last updated:** [March 2, 2026, 2:22pm UTC](https://community.sonatype.com/t/raw-repository-powershell-helpfiles/16103 "2026-03-02T14:22:51Z")
I want to create a proxy RAW repository for the Powershell help files. Normally I can update the Hepfiles with the update-help command. Now I want to make the help files available in the domain as a repository. Is this… --- ## [How to deploy Sonatype Nexus CE to K8s?](https://community.sonatype.com/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360)
**Author:** [@Marc\_Richter](https://community.sonatype.com/u/Marc_Richter)\ **Replies:** 6\ **Last updated:** [February 27, 2026, 2:34pm UTC](https://community.sonatype.com/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360 "2026-02-27T14:34:07Z")
Hi everyone, we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. With the announcement… --- ## [Upgrade from 3.80 to 3.89 failed](https://community.sonatype.com/t/upgrade-from-3-80-to-3-89-failed/16022)
**Author:** [@Andrew\_Meyer1](https://community.sonatype.com/u/Andrew_Meyer1)\ **Replies:** 1\ **Last updated:** [February 5, 2026, 6:22pm UTC](https://community.sonatype.com/t/upgrade-from-3-80-to-3-89-failed/16022 "2026-02-05T18:22:26Z")
I am trying to upgrade from nexus 3.80 → 3.89 and I’m getting this error when accessing the server from behind my F5. Uncaught TypeError: Cannot set properties of undefined (setting 'transformOrigin') (https://nexus.exa… --- ## [Docker: How to remove all manifests without any tags assigned (with groovy or tasks)?](https://community.sonatype.com/t/docker-how-to-remove-all-manifests-without-any-tags-assigned-with-groovy-or-tasks/15146)
**Author:** [@Lukáš\_Krejza](https://community.sonatype.com/u/Luk%C3%A1%C5%A1_Krejza)\ **Replies:** 4\ **Last updated:** [June 24, 2025, 5:45pm UTC](https://community.sonatype.com/t/docker-how-to-remove-all-manifests-without-any-tags-assigned-with-groovy-or-tasks/15146 "2025-06-24T17:45:06Z")
Sonatype Nexus Repository COMMUNITY 3.77.2-02 I am trying to remove all manifests and their related blobs, that have no docker tag assigned. I.e. when I delete a tag in the browse UI, I would like to remove it’s associ… --- ## [Nexus Spring Boot Resource](https://community.sonatype.com/t/nexus-spring-boot-resource/15072)
**Author:** [@sadakacharbel](https://community.sonatype.com/u/sadakacharbel)\ **Replies:** 0\ **Last updated:** [June 4, 2025, 5:55pm UTC](https://community.sonatype.com/t/nexus-spring-boot-resource/15072 "2025-06-04T17:55:21Z")
Can someone please send me a small project (demo project) of the new Nexus repository in a Spring Boot project, or any other related resources about the new Nexus upgrade (\>3.78.0) I really appreciate any help you can p… --- ## [Setup SMTP Mail via M365 (smtp.office365.com)](https://community.sonatype.com/t/setup-smtp-mail-via-m365-smtp-office365-com/14977)
**Author:** [@rol.N](https://community.sonatype.com/u/rol.N)\ **Replies:** 3\ **Last updated:** [May 20, 2025, 4:15pm UTC](https://community.sonatype.com/t/setup-smtp-mail-via-m365-smtp-office365-com/14977 "2025-05-20T16:15:39Z")
Hi, I would like to setup SMTP mail via M365. Mail verification does not work. Failed to invoke action method: coreui\_Email.sendVerification, java-method: org.sonatype.nexus.coreui.EmailComponent.sendVerification org.… --- ## [Nexus Core Build](https://community.sonatype.com/t/nexus-core-build/14827)
**Author:** [@Sarath\_Kumar\_S](https://community.sonatype.com/u/Sarath_Kumar_S)\ **Replies:** 1\ **Last updated:** [April 25, 2025, 1:05pm UTC](https://community.sonatype.com/t/nexus-core-build/14827 "2025-04-25T13:05:34Z")
Hello Team, I have few questions on nexus core. I have highlighted them below. I need to know if there is any docker images available for nexus-core in docker hub. If not please let me know the steps to build a docker… --- ## [Can I use a hosted docker repository as a remote storage for a proxy docker repository?](https://community.sonatype.com/t/can-i-use-a-hosted-docker-repository-as-a-remote-storage-for-a-proxy-docker-repository/14671)
**Author:** [@nguyen\_phu](https://community.sonatype.com/u/nguyen_phu)\ **Replies:** 1\ **Last updated:** [March 24, 2025, 3:52pm UTC](https://community.sonatype.com/t/can-i-use-a-hosted-docker-repository-as-a-remote-storage-for-a-proxy-docker-repository/14671 "2025-03-24T15:52:17Z")
I have setup 2 Nexus repo, Nexus one will be used as a hosted registry for user to upload their docker images, the Nexus two will be use internal for user to pull image from Nexus one, I have configured Nexus one for use… --- ## [Status of https://download.sonatype.com/nexus/3/latest-unix.tar.gz](https://community.sonatype.com/t/status-of-https-download-sonatype-com-nexus-3-latest-unix-tar-gz/14565)
**Author:** [@Robin\_Gfatter](https://community.sonatype.com/u/Robin_Gfatter)\ **Replies:** 4\ **Last updated:** [March 12, 2025, 3:33pm UTC](https://community.sonatype.com/t/status-of-https-download-sonatype-com-nexus-3-latest-unix-tar-gz/14565 "2025-03-12T15:33:48Z")
Like many here, I use a script to update to the latest Sonatype Nexus versions. As of today, the URL https://download.sonatype.com/nexus/3/latest-unix.tar.gz redirects to https://sonatype-download.global.ssl.fastly.net/… --- ## [Nexus Helm Proxy Fails for Newer Bitnami Charts (502 Bad Gateway)](https://community.sonatype.com/t/nexus-helm-proxy-fails-for-newer-bitnami-charts-502-bad-gateway/14483)
**Author:** [@pogacnik](https://community.sonatype.com/u/pogacnik)\ **Replies:** 1\ **Last updated:** [February 26, 2025, 6:54pm UTC](https://community.sonatype.com/t/nexus-helm-proxy-fails-for-newer-bitnami-charts-502-bad-gateway/14483 "2025-02-26T18:54:14Z")
I’m running Nexus 3.51.0-01 and have a Helm proxy repository configured to pull charts from https://charts.bitnami.com/bitnami. Everything works fine for older versions of Bitnami charts (e.g., bitnami/redis:20.3.0), but… --- ## [Issue Uploading Python Packages to Nexus: "Metadata is missing required fields"](https://community.sonatype.com/t/issue-uploading-python-packages-to-nexus-metadata-is-missing-required-fields/14065)
**Author:** [@pogacnik](https://community.sonatype.com/u/pogacnik)\ **Replies:** 2\ **Last updated:** [December 24, 2024, 6:48am UTC](https://community.sonatype.com/t/issue-uploading-python-packages-to-nexus-metadata-is-missing-required-fields/14065 "2024-12-24T06:48:00Z")
Hello, I often encounter the following issue when uploading Python packages to Nexus. I’m using the following command: python3 -m twine upload -u "admin" -p "\*\*\*\*" --repository-url "http://192.168.163.30:8081/repositor… --- ## [Several reports NexusIQ ADO in tab Nexus IQ Summary Report](https://community.sonatype.com/t/several-reports-nexusiq-ado-in-tab-nexus-iq-summary-report/14042)
**Author:** [@duboffik](https://community.sonatype.com/u/duboffik)\ **Replies:** 1\ **Last updated:** [December 19, 2024, 7:58pm UTC](https://community.sonatype.com/t/several-reports-nexusiq-ado-in-tab-nexus-iq-summary-report/14042 "2024-12-19T19:58:08Z")
Hello. In my ADO pipeline, we have several stages with NexusIqPipelineTask@1 for multiple repositories. Can I publish several Nexus IQ reports on the ‘Nexus IQ Summary Report’ tab? --- ## [How to Configure Nexus 3 to Send Email Notifications for Low Disk Space?](https://community.sonatype.com/t/how-to-configure-nexus-3-to-send-email-notifications-for-low-disk-space/13723)
**Author:** [@pogacnik](https://community.sonatype.com/u/pogacnik)\ **Replies:** 1\ **Last updated:** [October 24, 2024, 2:14pm UTC](https://community.sonatype.com/t/how-to-configure-nexus-3-to-send-email-notifications-for-low-disk-space/13723 "2024-10-24T14:14:11Z")
Hi all, I’m running Nexus 3.51.0-01, and I’m looking for a way to set up email notifications when the disk space is running low. I know there are options to check the blob store usage, but I can’t find any settings to t… --- ## [can't download from gitlab.com](https://community.sonatype.com/t/cant-download-from-gitlab-com/13582)
**Author:** [@fantaunix](https://community.sonatype.com/u/fantaunix)\ **Replies:** 0\ **Last updated:** [October 2, 2024, 2:57pm UTC](https://community.sonatype.com/t/cant-download-from-gitlab-com/13582 "2024-10-02T14:57:19Z")
Hello everyone, i don’t know why but seems gitlab changed repos and now my nexus can’t download package from that repo. From the server the curls going 200 but nexus do not download the current package. Can anyone hel… --- ## [docker login failed ](https://community.sonatype.com/t/docker-login-failed/13501)
**Author:** [@rahuls50](https://community.sonatype.com/u/rahuls50)\ **Replies:** 2\ **Last updated:** [September 24, 2024, 12:39pm UTC](https://community.sonatype.com/t/docker-login-failed/13501 "2024-09-24T12:39:17Z")
Hello Team, I have installed nexus-3.69.0-02 on standalone server. I have also created docker hosted Repositories URL:- https://testnexusrepo.xxx.com/repository/dockertest/ and I have also installed nginx on the same … --- ## [A problem about download npm-package after invalidate cache](https://community.sonatype.com/t/a-problem-about-download-npm-package-after-invalidate-cache/13405)
**Author:** [@jiangbaiheng](https://community.sonatype.com/u/jiangbaiheng)\ **Replies:** 2\ **Last updated:** [September 5, 2024, 5:03pm UTC](https://community.sonatype.com/t/a-problem-about-download-npm-package-after-invalidate-cache/13405 "2024-09-05T17:03:25Z")
Hello team: When I press invalidate cache of a group\_nexus\_repo, I can not download some npm package，the key logs as shown: There are many logs of this type, causing the service to be unavailable for short periods o… --- ## [Nexus3 migration from CentOS to RHEL](https://community.sonatype.com/t/nexus3-migration-from-centos-to-rhel/12948)
**Author:** [@scordio.martina](https://community.sonatype.com/u/scordio.martina)\ **Replies:** 0\ **Last updated:** [July 24, 2024, 3:09pm UTC](https://community.sonatype.com/t/nexus3-migration-from-centos-to-rhel/12948 "2024-07-24T15:09:22Z")
We are migrating Nexus Repository 3 from a CentOS server to a RHEL server following the official documentation https://support.sonatype.com/hc/en-us/articles/360010352014-Moving-a-Nexus-Repo-3-Instance-to-a-New-Locati… --- ## [How should APT Repository Metadata be handled?](https://community.sonatype.com/t/how-should-apt-repository-metadata-be-handled/12625)
**Author:** [@kyle.filby](https://community.sonatype.com/u/kyle.filby)\ **Replies:** 1\ **Last updated:** [May 30, 2024, 1:24pm UTC](https://community.sonatype.com/t/how-should-apt-repository-metadata-be-handled/12625 "2024-05-30T13:24:51Z")
Hello, I have created an APT hosted repository and have pushed my components to it using the POST API. I can see my components have appeared in the repository, however the APT repository only supports ‘.deb’ and ‘.udeb’… --- ## [Can I Proxy a Sonatype Hosted Repository?](https://community.sonatype.com/t/can-i-proxy-a-sonatype-hosted-repository/12584)
**Author:** [@bryantiang15](https://community.sonatype.com/u/bryantiang15)\ **Replies:** 1\ **Last updated:** [May 16, 2024, 9:29am UTC](https://community.sonatype.com/t/can-i-proxy-a-sonatype-hosted-repository/12584 "2024-05-16T09:29:19Z")
Im using Sonatype Nexus Repo OSS In my company Is it possible to set up a Proxy Repo, that proxies data from another Sonatype Hosted Repo? My idea is to have: Datacenter 1 : Hosted Repo Datacenter 2 : Proxy Repo of t… --- ## [How to upload .deb files using the jenkins pipeline and your credentials to the Nexus OSS](https://community.sonatype.com/t/how-to-upload-deb-files-using-the-jenkins-pipeline-and-your-credentials-to-the-nexus-oss/7010)
**Author:** [@sobrito](https://community.sonatype.com/u/sobrito)\ **Replies:** 1\ **Last updated:** [April 5, 2024, 5:27pm UTC](https://community.sonatype.com/t/how-to-upload-deb-files-using-the-jenkins-pipeline-and-your-credentials-to-the-nexus-oss/7010 "2024-04-05T17:27:40Z")
I I’m trying to use the Nexus repository to manage \*.deb packages generated by jenkins, but when trying to upload these packages to nexus I’m getting a lot of errors, what is the best way to publish the packages in deb f… --- ## [Publishing static sites archives (React/Nextjs)?](https://community.sonatype.com/t/publishing-static-sites-archives-react-nextjs/12147)
**Author:** [@gavenkoa](https://community.sonatype.com/u/gavenkoa)\ **Replies:** 3\ **Last updated:** [February 27, 2024, 5:26pm UTC](https://community.sonatype.com/t/publishing-static-sites-archives-react-nextjs/12147 "2024-02-27T17:26:25Z")
In the end of the build of React or Next.js I have a static site (a directory with HTML/CSS/JS/fonts/jpeg files). I want to “release” the site to Nexus repository. I don’t understand package/repository format to choose… --- ## [How To Use Sonatype if it only has 1 level file system?](https://community.sonatype.com/t/how-to-use-sonatype-if-it-only-has-1-level-file-system/11999)
**Author:** [@bryantiang15](https://community.sonatype.com/u/bryantiang15)\ **Replies:** 4\ **Last updated:** [February 9, 2024, 2:43pm UTC](https://community.sonatype.com/t/how-to-use-sonatype-if-it-only-has-1-level-file-system/11999 "2024-02-09T14:43:08Z")
Hi There, My company is adopting Sonatype Nexus OSS for the first time. Upon our POC, we found that Sonatype only has a single level file system. But we have many different products, from different development teams. I… --- ## [Nexus Repository Best Practices: Cleanup Policies, Part 2](https://community.sonatype.com/t/nexus-repository-best-practices-cleanup-policies-part-2/11593)
**Author:** [@jzora](https://community.sonatype.com/u/jzora)\ **Replies:** 2\ **Last updated:** [November 21, 2023, 9:12pm UTC](https://community.sonatype.com/t/nexus-repository-best-practices-cleanup-policies-part-2/11593 "2023-11-21T21:12:17Z")
In our last Best Practices post (which you can read here) we talked a little about cleanup policies. The operative word there is “little” – there’s a lot more to say. This one may be obvious, but a best practice is to s… --- ## [Sonar cloud authentication method](https://community.sonatype.com/t/sonar-cloud-authentication-method/10365)
**Author:** [@gleydsonepifanio](https://community.sonatype.com/u/gleydsonepifanio)\ **Replies:** 1\ **Last updated:** [March 29, 2023, 1:34pm UTC](https://community.sonatype.com/t/sonar-cloud-authentication-method/10365 "2023-03-29T13:34:55Z")
Hello good afternoon. I couldn’t find it in the documentation for sonar cloud. Is there federation authentication method to be configured via NAM and NDS tool in sonar cloud? --- ## [Nexus Repository Best Practices: Cleanup Policies](https://community.sonatype.com/t/nexus-repository-best-practices-cleanup-policies/11467)
**Author:** [@jzora](https://community.sonatype.com/u/jzora)\ **Replies:** 6\ **Last updated:** [November 13, 2023, 5:38pm UTC](https://community.sonatype.com/t/nexus-repository-best-practices-cleanup-policies/11467 "2023-11-13T17:38:35Z")
Quiz time: imagine a Nexus Repository instance used by a Javascript team that builds once every two weeks. How can an administrator remove components from the repo that aren’t being used? And how long should a component … [Next page](https://community.sonatype.com/c/nexus-repository/best-practices/55.md?page=1)