Artifactory

JFrog Artifactory is a universal binary and artifact repository manager. The open-source edition stores and proxies packages for many formats, including Maven, Gradle, Debian, and generic binaries, and acts as the single source of truth for your build artifacts. The web UI runs on port 8082.

Software included

Component	Version
Artifactory OSS	7.146.27
PostgreSQL	16
Ubuntu	24.04 LTS

Environment variables

Set these optionally when you deploy from the marketplace. Leave a field blank to have a secure value generated.

Variable	Description
`ARTIFACTORY_ADMIN_PASSWORD`	Artifactory admin password

Getting started

1. Connect to your VM

ssh ubuntu@<your-vm-ip>

2. Wait for first-boot configuration

On the first boot, a setup script prepares persistent storage, generates the PostgreSQL password, and starts the Artifactory and PostgreSQL containers. Track progress:

journalctl -u artifactory-first-boot.service -f

If you attach an extra blank data disk before first boot, the script formats and mounts it at /data. Otherwise, it stores data under /data on the root filesystem.

3. Verify Artifactory is running

cd /opt/artifactory
docker compose ps
curl -fsS http://127.0.0.1:8082/ui/ > /dev/null

4. Access the Artifactory UI

Artifactory is bound to localhost until you complete the setup wizard. From your local machine, start an SSH tunnel:

ssh -L 8082:127.0.0.1:8082 -L 8081:127.0.0.1:8081 ubuntu@<your-vm-ip>

Then open:

http://127.0.0.1:8082/ui/

Field	Value
Username	`admin`
Password	`password`

Change the password in the setup wizard before making the service reachable from a network.

Managing Artifactory

# Check container status
cd /opt/artifactory && docker compose ps

# Restart
cd /opt/artifactory && docker compose restart

# View logs
cd /opt/artifactory && docker compose logs -f

Path	Purpose
`/opt/artifactory/docker-compose.yml`	Docker Compose configuration
`/opt/artifactory/.env`	PostgreSQL password
`/data/artifactory/var/`	Artifactory data
`/data/artifactory/postgresql/`	PostgreSQL data

Security

Ports 8081 and 8082 are bound to localhost. UFW is enabled and allows SSH (port 22) only by default. Use the SSH tunnel above for initial setup.

After changing the administrator password, expose Artifactory only through a trusted network path. To publish port 8082 directly, you must first change its Docker Compose port binding from 127.0.0.1:8082:8082 to 8082:8082, then allow a trusted IP:

sudo ufw allow from <trusted-ip> to any port 8082

For production use, keep Artifactory bound to localhost and place it behind a reverse proxy so you can serve it on port 443 with a TLS certificate.