Package repositories

Private APT and RPM repositories for your team, plus scheduled mirrors of upstream distributions. Every repository is signed and served from the same endpoints as the container registry.

Repository endpoints require a team access token. Anonymous requests receive 401 Unauthorized. See authentication.

Supported formats

FormatDistributionsArchitecturesEndpoint
APTDebian bookworm, trixie · Ubuntu jammy, nobleamd64, arm64https://cdn.nordbaysys.com/apt/
RPMRHEL 8/9 · Rocky · Fedora 39/40x86_64, aarch64https://cdn.nordbaysys.com/rpm/
OCIImages, Helm charts, generic artifactsmulti-archhttps://cdn.nordbaysys.com/v2/

Add an APT repository

# credentials for apt (token from the console)
echo "machine cdn.nordbaysys.com login $NB_TEAM password $NB_TOKEN" \
  | sudo tee /etc/apt/auth.conf.d/nordbay.conf >/dev/null

curl -fsSL -u "$NB_TEAM:$NB_TOKEN" https://cdn.nordbaysys.com/apt/gpg.key \
  | sudo gpg --dearmor -o /usr/share/keyrings/nb.gpg

echo "deb [signed-by=/usr/share/keyrings/nb.gpg] https://cdn.nordbaysys.com/apt/debian bookworm main" \
  | sudo tee /etc/apt/sources.list.d/nordbay.list
sudo apt update

Add an RPM repository

sudo tee /etc/yum.repos.d/nordbay.repo <<EOF
[nordbay]
name=NordBay Systems
baseurl=https://cdn.nordbaysys.com/rpm/el/\$releasever/\$basearch
username=$NB_TEAM
password=$NB_TOKEN
gpgcheck=1
gpgkey=https://cdn.nordbaysys.com/rpm/gpg.key
enabled=1
EOF
sudo dnf makecache

Upstream mirrors

Mirrors are synchronised every six hours and published atomically, so clients never see a half-updated index. Snapshots are kept for 30 days and can be pinned by date.

MirrorSuitesSyncSnapshots
debianbookworm, bookworm-updates, trixieevery 6 h30 days
debian-securitybookworm-security, trixie-securityhourly30 days
ubuntujammy, noble (+updates, +security)every 6 h30 days
rocky8, 9 (BaseOS, AppStream)every 6 h30 days
epel8, 9daily14 days