[SAC] [OSGeo] #2932: Upgrade nexus to 3.53.1 or higher

Committees SAC tickets
1

#2932: Upgrade nexus to 3.53.1 or higher
---------------------------+--------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2023-I
Component: Systems Admin | Keywords:
---------------------------+--------------------------------------
repo.osgeo.org is currently on 3.45.1

Latest available nexus is 3.53.1

there are no CVEE fixes noted, and most changes since seem to be aournd
PostgreSQL as backend store (which we are not using, we are using the
built-in database) and Ruby Gems. there is also a name change from Nexus
Repository to Sonatype Nexus Repository.

One caution noted in the upgrades is possible issue with custom plugins.

"There is a known issue in Sonatype Nexus Repository 3.53.0 impacting
those using community or custom plugins. These plugins will not load from
the typical install directory and, in some cases, this may prevent
Sonatype Nexus Repository from starting.

If you are using community or custom plugins and wish to upgrade, remove
the plugin before doing so. Otherwise, wait to upgrade until we release a
fix for this issue.

If you are not using community or custom plugins, there is no impact."

https://help.sonatype.com/repomanager3/product-information/release-
notes/2023-release-notes/sonatype-nexus-repository-3.53.0---3.53.1
-release-notes

so I'll probably hold off for a bit longer till the next release comes out
just in case.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2932&gt;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

2

#2932: Upgrade nexus to 3.57.0 or higher
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2023-I
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+---------------------------------------
Changes (by robe):

* summary: Upgrade nexus to 3.53.1 or higher => Upgrade nexus to 3.57.0 or
     higher

Old description:

repo.osgeo.org is currently on 3.45.1

Latest available nexus is 3.53.1

there are no CVEE fixes noted, and most changes since seem to be aournd
PostgreSQL as backend store (which we are not using, we are using the
built-in database) and Ruby Gems. there is also a name change from Nexus
Repository to Sonatype Nexus Repository.

One caution noted in the upgrades is possible issue with custom plugins.

"There is a known issue in Sonatype Nexus Repository 3.53.0 impacting
those using community or custom plugins. These plugins will not load from
the typical install directory and, in some cases, this may prevent
Sonatype Nexus Repository from starting.

If you are using community or custom plugins and wish to upgrade, remove
the plugin before doing so. Otherwise, wait to upgrade until we release a
fix for this issue.

If you are not using community or custom plugins, there is no impact."

https://help.sonatype.com/repomanager3/product-information/release-
notes/2023-release-notes/sonatype-nexus-repository-3.53.0---3.53.1
-release-notes

so I'll probably hold off for a bit longer till the next release comes
out just in case.

New description:

repo.osgeo.org is currently on 3.45.1

Latest available nexus is 3.57.0

More than a year has passed since our upgrade

there are no CVEE fixes noted, and most changes since seem to be around
PostgreSQL as backend store (which we are not using, we are using the
built-in database), Ruby Gems, Conan repo. There is also a name change
from Nexus Repository to Sonatype Nexus Repository.

One caution noted in the upgrades is possible issue with custom plugins.

"There is a known issue in Sonatype Nexus Repository 3.53.0 impacting
those using community or custom plugins. These plugins will not load from
the typical install directory and, in some cases, this may prevent
Sonatype Nexus Repository from starting.

If you are using community or custom plugins and wish to upgrade, remove
the plugin before doing so. Otherwise, wait to upgrade until we release a
fix for this issue.

If you are not using community or custom plugins, there is no impact."

https://help.sonatype.com/repomanager3/product-information/release-
notes/2023-release-notes/sonatype-nexus-repository-3.53.0---3.53.1
-release-notes

so I'll probably hold off for a bit longer till the next release comes out
just in case.

--
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2932#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

3

#2932: Upgrade nexus to 3.57.0 or higher
----------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2024-I
Component: SysAdmin | Resolution:
Keywords: |
----------------------+---------------------------------------
Comment (by robe):

I've started the upgrade process for this and also plan to upgrade the OS
from buster to bullseye.

Will be upgraded to latest nexus which is currently 3.63.0
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2932#comment:3&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

4

#2932: Upgrade nexus to 3.57.0 or higher
----------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: normal | Milestone: Sysadmin Contract 2024-I
Component: SysAdmin | Resolution: fixed
Keywords: |
----------------------+---------------------------------------
Changes (by robe):

* status: new => closed
* resolution: => fixed

Comment:

This is done, but I ran into some stumbling blocks with upgrading from
buster to bullseye.

After I upgraded to bullseye, docker wouldn't start up. I finally ended
up removing apparmor, as that seemed to be what was preventing it, and I
noticed as part of the docker dist-upgrade it installed apparmor. I
recall running into this issue before.

But sadly before I tried that, I made the mistake of trying to run the
container priviledge with security.priveleged=true, which cause it to
hang.

Long story short, I copied it to new container called nexus-2, and
switched all the nginx configs to that one. Probably will require osgeo3
reboot before I can delete the old one and move back to its original name.
I'll try that some other time.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2932#comment:4&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.