Package repositories
Private APT and RPM repositories for your team, plus scheduled mirrors of upstream distributions. Every repository is signed and served from the same endpoints as the container registry.
Repository endpoints require a team access token. Anonymous requests receive
401 Unauthorized. See authentication.Supported formats
| Format | Distributions | Architectures | Endpoint |
|---|---|---|---|
| APT | Debian bookworm, trixie · Ubuntu jammy, noble | amd64, arm64 | https://cdn.nordbaysys.com/apt/ |
| RPM | RHEL 8/9 · Rocky · Fedora 39/40 | x86_64, aarch64 | https://cdn.nordbaysys.com/rpm/ |
| OCI | Images, Helm charts, generic artifacts | multi-arch | https://cdn.nordbaysys.com/v2/ |
Add an APT repository
# credentials for apt (token from the console)
echo "machine cdn.nordbaysys.com login $NB_TEAM password $NB_TOKEN" \
| sudo tee /etc/apt/auth.conf.d/nordbay.conf >/dev/null
curl -fsSL -u "$NB_TEAM:$NB_TOKEN" https://cdn.nordbaysys.com/apt/gpg.key \
| sudo gpg --dearmor -o /usr/share/keyrings/nb.gpg
echo "deb [signed-by=/usr/share/keyrings/nb.gpg] https://cdn.nordbaysys.com/apt/debian bookworm main" \
| sudo tee /etc/apt/sources.list.d/nordbay.list
sudo apt update
Add an RPM repository
sudo tee /etc/yum.repos.d/nordbay.repo <<EOF [nordbay] name=NordBay Systems baseurl=https://cdn.nordbaysys.com/rpm/el/\$releasever/\$basearch username=$NB_TEAM password=$NB_TOKEN gpgcheck=1 gpgkey=https://cdn.nordbaysys.com/rpm/gpg.key enabled=1 EOF sudo dnf makecache
Upstream mirrors
Mirrors are synchronised every six hours and published atomically, so clients never see a half-updated index. Snapshots are kept for 30 days and can be pinned by date.
| Mirror | Suites | Sync | Snapshots |
|---|---|---|---|
| debian | bookworm, bookworm-updates, trixie | every 6 h | 30 days |
| debian-security | bookworm-security, trixie-security | hourly | 30 days |
| ubuntu | jammy, noble (+updates, +security) | every 6 h | 30 days |
| rocky | 8, 9 (BaseOS, AppStream) | every 6 h | 30 days |
| epel | 8, 9 | daily | 14 days |