dockernexussonatype

Default encryption key in Nexus Sonatype 3.73


I am using Sonatype Nexus under 3.72 docker version, I would like to upgrade in 3.75.1, but when I am doing this, I have a "Warning/error" that says : Default Secret Encryption Key : Nexus was not configured with an encryption key and is using the Default key"

In my case I would like to use the default one, because I have no password to encrypt in my repositories, so I am wondering how to change this warning into green light ?

the only things I've found are documentations to explain how to create a new encryption key like this pages : https://community.sonatype.com/t/default-secret-encryption-key/13658 https://help.sonatype.com/en/re-encryption-in-nexus-repository.html

But I don't understand them and they explain (or at least they try to explain) how to create a new encryption key, but it's not exactly what I want.

If there is no alternative, could someone explain me how to create an encryption key ?

Thanks a lot


Solution

  • Follow the instructions here to put a new key in place:

    https://help.sonatype.com/en/re-encryption-in-nexus-repository.html

    The "key" can be any password you choose. Put that json file in persistent storage in the container.

    Then when starting the container add this to the INSTALL4J_ADD_VM_PARAMS environment variable:

    -nexus.secrets.file=/full/path/to/your/secrets/<name_of_key_file>.json
    

    That path should be the path to the file which you placed in persistent storage in your container.

    After that call the REST API to trigger re-encryption.