Maven 依赖发布与仓库治理的过程解析

<distributionManagement>
    <repository>
        <id>corp-releases</id>
        <name>Corporate Releases</name>
        <url>https://nexus.example.com/repository/maven-releases</url>
    </repository>
    <snapshotRepository>
        <id>corp-snapshots</id>
        <name>Corporate Snapshots</name>
        <url>https://nexus.example.com/repository/maven-snapshots</url>
    </snapshotRepository>
    <site>
        <id>project-site</id>
        <url>scp://www.example.com/var/www/sites/${project.artifactId}</url>
    </site>
</distributionManagement>

for (Server server : settings.getServers()) {
    if (server.getId().equals(repository.getId())) {
        applyAuthentication(server);
        break;
    }
}

<site>
    <id>site-tunnel</id>
    <url>scpexe://bastion.example.com:2222//opt/docs/${project.artifactId}</url>
</site>

<server>
    <id>site-tunnel</id>
    <configuration>
        <sshExecutable>/usr/bin/ssh</sshExecutable>
        <scpExecutable>/usr/bin/scp</scpExecutable>
        <proxyHost>bastion.example.com</proxyHost>
        <proxyPort>2222</proxyPort>
        <tunnelHost>true</tunnelHost>
    </configuration>
</server>

{
    "name": "prod-deployers",
    "repositories": ["maven-prod-releases"],
    "operations": ["deploy","delete"],
    "filters": {
        "includePatterns": ["com/example/prod/**"],
        "excludePatterns": ["**/*-SNAPSHOT"]
    }
}

// Nexus防火墙规则示例
rule {
    criteria {
        vulnerabilitySeverity >= 7 
        licenseNames.contains("GPL")
    }
    action {
        blockDeployment()
        alertSlack("#security-alerts")
    }
}

public Mirror getMirror(Repository repository) {
    List<Mirror> candidates = new ArrayList<>();
    for (Mirror mirror : mirrors) {
        if (mirror.matches(repository)) {
            candidates.add(mirror);
        }
    }
    return candidates.stream()
        .max(Comparator.comparing(m -> m.getMirrorOf().length()))
        .orElse(null);
}

<mirror>
    <id>mirror-aliyun</id>
    <mirrorOf>external:*</mirrorOf>
    <url>https://maven.aliyun.com/repository/public</url>
</mirror>
<mirror>
    <id>internal-central</id>
    <mirrorOf>central</mirrorOf>
    <url>https://nexus.example.com/repository/maven-central</url>
</mirror>

# 清理30天未使用的快照
mvn dependency:purge-local-repository \
    -DsnapshotsOnly=true \
    -DreResolve=false \
    -Dage=30d
# 按GAV模式清理
mvn dependency:purge-local-repository \
    -Dincludes=com.example:demo-*:1.0.*

@startuml
node "Global Master" as master
node "APAC Mirror" as apac
node "EMEA Mirror" as emea
node "AMER Mirror" as amer
master --> apac : 双向同步
master --> emea : 双向同步
master --> amer : 双向同步
apac --> [APAC Build Agent]
emea --> [EMEA Build Agent]
amer --> [AMER Build Agent]
@enduml

# Nexus HA配置示例
nexus:
  datastore:
    enabled: true
    type: postgresql
    url: jdbc:postgresql://db1,db2/nexus
    ha:
      enabled: true
      clusterName: nexus-prod
  discovery:
    enabled: true
    nodes:
      - node1:8081
      - node2:8081