p2 firewall demo - michaelmworthington/codesamples GitHub Wiki

Introduction

This page walks through the steps to set up NXRM to test P2 Firewall using http://download.eclipse.org/releases/mars

P2 support in NXRM3 was added in 3.21.

See the official docs at  https://help.sonatype.com/repomanager3/formats/p2-repositories

Table of Contents

Prerequisites

  • IQ Server installed and running
  • NXRM 3 installed and running and configured with the IQ Server
  • Docker for Mac installed and running

Step 1. Create a new Proxy Repository in NXRM

Use http://download.eclipse.org/releases/mars as the Remote URL. Accept default values for the remainder of the settings.

Step 2. Enable Firewall for the New Proxy Repo

Step 3. Run Eclipse

Start Eclipse

Step 4. Use the set up the update sites

Step 5. Use the update site to Install a package

Observe the inbound requests to NXRM in the request.log file:

172.18.0.1 - - [12/Nov/2020:23:50:17 -0500] "HEAD /nexus/repository/eclipse.org-mars-proxy/compositeArtifacts.jar HTTP/1.1" 200 - 0 164 "Apache-HttpClient/4.3.6 (java 1.5)" [qtp15707558-1167] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:17 -0500] "GET /nexus/repository/eclipse.org-mars-proxy/compositeArtifacts.jar HTTP/1.1" 206 - 588 11 "p2/mars-sr0 (Java 1.8.0_141-b15 Oracle Corporation; MacOSX 10.15.7 x86-64; en_US) org.eclipse.epp.package.jee.product/4.5.2.M20160212-1500 (org.eclipse.ui.ide.workbench)" [qtp15707558-1153] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:19 -0500] "HEAD /nexus/repository/eclipse.org-mars-proxy/154f22519b424016550b83b1c9a49a0bff143aca5910f8565eae36dd798450f3/artifacts.xml.xz HTTP/1.1" 200 - 0 2385 "Apache-HttpClient/4.3.6 (java 1.5)" [qtp15707558-1167] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:19 -0500] "GET /nexus/repository/eclipse.org-mars-proxy/154f22519b424016550b83b1c9a49a0bff143aca5910f8565eae36dd798450f3/artifacts.xml.xz HTTP/1.1" 206 - 7032 23 "p2/mars-sr0 (Java 1.8.0_141-b15 Oracle Corporation; MacOSX 10.15.7 x86-64; en_US) org.eclipse.epp.package.jee.product/4.5.2.M20160212-1500 (org.eclipse.ui.ide.workbench)" [qtp15707558-1153] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:26 -0500] "HEAD /nexus/repository/eclipse.org-mars-proxy/42e0340105bb536ac7d8f75fe60f89df823dc6896019a44cd050ca0c923fe497/artifacts.xml.xz HTTP/1.1" 200 - 0 7045 "Apache-HttpClient/4.3.6 (java 1.5)" [qtp15707558-1167] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:26 -0500] "GET /nexus/repository/eclipse.org-mars-proxy/42e0340105bb536ac7d8f75fe60f89df823dc6896019a44cd050ca0c923fe497/artifacts.xml.xz HTTP/1.1" 206 - 388932 21 "p2/mars-sr0 (Java 1.8.0_141-b15 Oracle Corporation; MacOSX 10.15.7 x86-64; en_US) org.eclipse.epp.package.jee.product/4.5.2.M20160212-1500 (org.eclipse.ui.ide.workbench)" [qtp15707558-1153] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:32 -0500] "HEAD /nexus/repository/eclipse.org-mars-proxy/20ccae0ab67f71bdd5b0cc9910357ea116f0cc0033bcdbe684cfefbaa8d3b3aa/artifacts.xml.xz HTTP/1.1" 200 - 0 5724 "Apache-HttpClient/4.3.6 (java 1.5)" [qtp15707558-1167] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:32 -0500] "GET /nexus/repository/eclipse.org-mars-proxy/20ccae0ab67f71bdd5b0cc9910357ea116f0cc0033bcdbe684cfefbaa8d3b3aa/artifacts.xml.xz HTTP/1.1" 206 - 392596 22 "p2/mars-sr0 (Java 1.8.0_141-b15 Oracle Corporation; MacOSX 10.15.7 x86-64; en_US) org.eclipse.epp.package.jee.product/4.5.2.M20160212-1500 (org.eclipse.ui.ide.workbench)" [qtp15707558-1153] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:39 -0500] "HEAD /nexus/repository/eclipse.org-mars-proxy/26d7c891b3fac579a24d65ba2bc8af3aaefe5862e82ef68e47ac22d3f207d4c7/artifacts.xml.xz HTTP/1.1" 200 - 0 6101 "Apache-HttpClient/4.3.6 (java 1.5)" [qtp15707558-1167] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"
172.18.0.1 - - [12/Nov/2020:23:50:39 -0500] "GET /nexus/repository/eclipse.org-mars-proxy/26d7c891b3fac579a24d65ba2bc8af3aaefe5862e82ef68e47ac22d3f207d4c7/artifacts.xml.xz HTTP/1.1" 206 - 396340 27 "p2/mars-sr0 (Java 1.8.0_141-b15 Oracle Corporation; MacOSX 10.15.7 x86-64; en_US) org.eclipse.epp.package.jee.product/4.5.2.M20160212-1500 (org.eclipse.ui.ide.workbench)" [qtp15707558-1153] host=host.docker.internal:8083 forwarded-proto=- forwarded-host=- forwarded-port=- forwarded-server=- "new-forwarded=-" "RUT=-" "foo=-"

Step 6. Browse the Proxy Repo

Step 7. Go to the Firewall Report

Repo List

IQ Server Report

Step 8. Test Quarantine

Not Supported

Step 9. Notes

The NXRM Tree View shows the Quarantined component:

Not Supported

You can view the component information panel (CIP) right in NXRM

Not supported

⚠️ **GitHub.com Fallback** ⚠️