Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-21642

Go Module checksum database proxy support

    Details

    • Type: Improvement
    • Status: New
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.19.1
    • Fix Version/s: None
    • Component/s: golang
    • Labels:

      Description

      https://go.googlesource.com/proposal/+/master/design/25530-sumdb.md

      Expected

      Provide a supported way for NXRM to proxy the Go module ecosystem checksum database ( https://sum.golang.org/ ) such that GO clients behind firewalls can verify GO module checksums by only accessing NXRM directly.

      Customer provided workaround

      To get go's sumdb working with NXRM (3.23.0-03  and golang 1.14 was tested):
       

      1. In Nexus create go(proxy) repo pointing to https://gonexus.dev/, we'll call the repo "gonexus"
      2. In Nexus create raw(proxy) repo pointing to https://sum.golang.org, we'll call the repo "gosum"
      3. Then on client workstation, set the following environment vars:
      go env -w GOPROXY=https://nexus.example.com/repository/gonexus
      go env -w 'GOSUMDB=sum.golang.org https://nexus.example.com/repository/gosum'
      

      Ref docs: https://www.goproxy.io/docs/GOSUMDB-env.html

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              plynch Peter Lynch
              Last Updated By:
              Peter Lynch Peter Lynch
              Votes:
              10 Vote for this issue
              Watchers:
              17 Start watching this issue

                Dates

                Created:
                Updated:
                Date of First Response:

                  tigCommentSecurity.panel-title