May 2016 Summaries

The nexus2art migrator, which has now been deprecated, was a tool designed to facilitate the migration from Sonatype Nexus Repository to JFrog Artifactory by providing a user-friendly, wizard-like interface. It allowed users to transfer repositories, artifacts, users, and settings with ease, requiring an initial setup to connect to both Nexus and JFrog repositories. The migrator was equipped with features to validate naming conventions, highlight errors, and provide context-sensitive help, making it adaptable for users needing to fine-tune or save configurations, which were stored in JSON format. It supported the migration of users, groups, privileges, scheduled tasks, and other settings, while also accommodating paid Nexus features and allowing modifications to repository elements. Despite its capabilities, users are now advised to refer to the JFrog documentation for guidance on migrating from Nexus to Artifactory.

JFrog made several significant product announcements at swampUP, highlighting new features and integrations across their platform. JFrog Xray was introduced as the first universal impact analysis tool, offering comprehensive insight into container images, software packages, and binary artifacts. JFrog Artifactory's integration with Bintray was enhanced with Distribution Repositories, enabling seamless artifact promotion and distribution. JFrog Mission Control now includes disaster recovery features to safeguard data and automate license provisioning for Artifactory instances. Migration from Sonatype Nexus to JFrog Artifactory is simplified with the nexus2art migrator. Support for Google Cloud Platform has been added, expanding deployment options. Partner integrations include collaborations with Atlassian Bitbucket, Mesosphere DC/OS, Azure DevOps/TFS, and Sumo Logic, enhancing DevOps workflows and providing improved data analytics and artifact management capabilities.

Bintray offers a secure method for sending private files through the use of signed URLs and on-the-fly encryption. Users can generate a URL signing key and use the API to create a signed URL, which can be set to expire after a specified time for added security. To further protect sensitive files, Bintray allows users to attach a secret to the signed URL, enabling AES 256 CBC encryption before the file is downloaded. The recipient needs both the signed URL and the secret key, which can be shared through an alternative communication channel, to decrypt the file using an OpenSSL command line. This process ensures that even if a URL or downloaded file falls into the wrong hands, the content remains protected.