Public | Automated Build

Last pushed: a year ago
Short Description
This builds a nexus image
Full Description

#Supported tags and respective Dockerfile links

What is adop-nexus?

adop-nexus is a wrapper for the sonatype/nexus image. It has primarily been built to perform extended configuration. Nexus® is an artifact repository manager.

How to use this image?

Run Nexus

To start the server, where version is the release version of the Docker container, run the following command.

  $ docker run -d --name nexus -p 8081:8081 -e LDAP_ENABLED=false accenture/adop-nexus:VERSION

If LDAP authentication is disabled the default user/password is:

  • username: admin
  • password: admin123

Persisting data

To persis data mount out the /sonatype-work directory.

e.g. $ docker run -d --name nexus -v $(pwd)/data:/sonatype-work -p 8081:8081 -e LDAP_ENABLED=false accenture/adop-nexus:VERSION

LDAP Authentication

By default, the image will enable LDAP authentication, setting the LDAP_ENABLED environment variable to false will disable LDAP authentication. The variables write Nexus ldap.xml configuration file.

The default nexus configuration depends on the following LDAP groups

  • nx-admin - administrators
  • nx-deployments - deployment users
  • nx-developers - developer accounts

Example run command:

  $ docker run -ti -p 8080:8081 \
     -e LDAP_SEARCH_BASE=dc=example,dc=com \
     -e LDAP_ENABLED=true \
     -e LDAP_URL=ldap \
     -e LDAP_BIND_DN=cn=admin,dc=example,dc=com \
     -e LDAP_USER_BASE_DN=ou=people \ 
     -e LDAP_GROUP_BASE_DN=ou=groups \ 
     -e LDAP_BIND_PASSWORD=password \ 

The image reads the following LDAP environment variables for ADOP OpenLDAP or LDAP_TYPE is 'openldap':

  • searchBase - ${LDAP_SEARCH_BASE}
  • systemUsername - ${LDAP_BIND_DN}
  • systemPassword - ${LDAP_BIND_PASSWORD}
  • protocol - ${LDAP_AUTH_PROTOCOL}
  • host - ${LDAP_URL}
  • port - ${LDAP_PORT:-389}
  • emailAddressAttribute - ${LDAP_USER_EMAIL_ATTRIBUTE:-mail}
  • ldapGroupsAsRoles - ${LDAP_GROUPS_AS_ROLES:-true}
  • groupBaseDn - ${LDAP_GROUP_BASE_DN}
  • groupIdAttribute - ${LDAP_GROUP_ID_ATTRIBUTE:-cn}
  • groupMemberAttribute - ${LDAP_GROUP_MEMBER_ATTRIBUTE-uniqueMember}
  • groupMemberFormat - ${username}
  • groupObjectClass - ${LDAP_GROUP_OBJECT_CLASS}
  • preferredPasswordEncoding - ${LDAP_PREFERRED_PASSWORD_ENCODING:-crypt}
  • userIdAttribute - ${LDAP_USER_ID_ATTRIBUTE:-uid}
  • userObjectClass - ${LDAP_USER_OBJECT_CLASS:-inetOrgPerson}
  • userBaseDn - ${LDAP_USER_BASE_DN}
  • userRealNameAttribute - ${LDAP_USER_REAL_NAME_ATTRIBUTE:-cn}

Additionally, the image reads the following LDAP environment variables if you want to use a Windows Active Directory or LDAP_TYPE is 'active_directory':

  • groupIdAttribute - ${LDAP_GROUP_ID_ATTRIBUTE:-cn}
  • groupMemberAttribute - ${LDAP_GROUP_MEMBER_ATTRIBUTE-uniqueMember}
  • groupObjectClass - ${LDAP_GROUP_OBJECT_CLASS:-groups}
  • userIdAttribute - ${LDAP_USER_ID_ATTRIBUTE:-sAMAccountName}
  • userObjectClass - ${LDAP_USER_OBJECT_CLASS:-person}
  • userBaseDn - ${LDAP_USER_BASE_DN}
  • userRealNameAttribute - ${LDAP_USER_REAL_NAME_ATTRIBUTE:-cn}


Other configuration variables

  • CONTEXT_PATH, passed as -Dnexus-webapp-context-path. This is used to define the URL which Nexus is accessed.
  • MAX_HEAP, passed as -Xmx. Defaults to 1g.
  • MIN_HEAP, passed as -Xms. Defaults to 256m.
  • JAVA_OPTS. Additional options can be passed to the JVM via this variable. Default: -server -XX:MaxPermSize=192m
  • NEXUS_BASE_URL, the nexus base URL
  • NEXUS_PROXY_HOST, the proxy server that connects to Maven public repository. This is used if the Nexus Docker host has strict firewall implementation.
  • NEXUS_PROXY_PORT, the proxy server port.
  • NEXUS_CENTRAL_REPO_URL, if you want to change the Central Repo default maven public repository
  • NEXUS_CREATE_CUSTOM_ROLES, if set to true, create custom roles according to the environment custom role variables:.
  • NEXUS_CUSTOM_ADMIN_ROLE , if set, create a custom group name with nx-admin role.
  • NEXUS_CUSTOM_DEV_ROLE , if set, create a custom group name with nx-developer role.
  • NEXUS_CUSTOM_DEPLOY_ROLE, if set, create a custom group name with nx-deployment role.
  • USER_AGENT, if set, you can enable Basic Authentication. How do I enable WWW-Authenticate headers for content 401 responses


Please view licence information for the software contained on this image.

#Supported Docker versions

This image is officially supported on Docker version 1.9.1.
Support for older versions (down to 1.6) is provided on a best-effort basis.

User feedback


Documentation for this image is available in the Sonatype/Nexus/Documentation.
Additional documentaion can be found under the docker-library/docs GitHub repo. Be sure to familiarize yourself with the repository's file before attempting a pull request.


If you have any problems with or questions about this image, please contact us through a GitHub issue.


You are invited to contribute new features, fixes, or updates, large or small; we are always thrilled to receive pull requests, and do our best to process them as fast as we can.

Before you start to code, we recommend discussing your plans through a GitHub issue, especially for more ambitious contributions. This gives other contributors a chance to point you in the right direction, give you feedback on your design, and help you find out if someone else is working on the same thing.

Docker Pull Command
Source Repository