Pantera Artifact Registry

Universal multi-format artifact registry built for enterprise teams.

User Guide | Developer Guide | Configuration | REST API | Contributing

---

Pantera is based on Artipie, an open-source binary artifact management tool. The core repository patterns, adapter architecture, and storage abstractions originate from Artipie and its contributors. Pantera builds on this foundation with significant enhancements in security, caching, operational tooling, and a complete management UI.

Key Features

• 15 package formats in a single deployment with local, proxy, and group repository modes
• Enterprise management UI with Vue.js dark-theme dashboard, file browser, and artifact search
• PostgreSQL-backed persistence for settings, RBAC policies, artifact metadata, and full-text search
• Supply chain security via configurable cooldown system that blocks freshly-published artifacts
• SSO integration with Okta OIDC (MFA support) and Keycloak, plus JWT-as-Password for high-performance auth
• HA clustering with Valkey pub/sub cache invalidation, PostgreSQL node registry, and shared S3 storage
• Stream-through caching with request deduplication, negative cache (L1 Caffeine + L2 Valkey), and disk cache with LRU/LFU eviction
• Prometheus metrics and ECS-structured JSON logging with Grafana dashboards
• REST API with 15+ endpoint handlers for full programmatic access

Supported Repository Types

Format	Local	Proxy	Group
Maven	x	x	x
Docker (OCI)	x	x	x
npm	x	x	x
PyPI	x	x	x
PHP / Composer	x	x	x
File (generic)	x	x	x
Go	x	x	x
RubyGems	x	-	x
Helm	x	-	-
NuGet	x	-	-
Debian	x	-	-
RPM	x	-	-
Conda	x	-	-
Conan	x	-	-
Hex	x	-	-

Quick Start

Prerequisites

• JDK 21+ and Maven 3.4+ (for building from source)
• Docker and Docker Compose (for running)
• pg_cron PostgreSQL extension — required for dashboard statistics (artifact count, storage usage). Without it the dashboard shows zeros. See Admin Guide — Database Setup for setup.

Build from source

git clone https://github.com/auto1-oss/pantera.git
cd pantera
mvn clean install -DskipTests

Run with Docker Compose

cd pantera-main/docker-compose
cp .env.example .env   # Edit with your settings
docker compose up -d

This starts the full stack:

Service	Port	Description
Nginx	8081 / 8443	Reverse proxy (HTTP/HTTPS)
Pantera	8088 (mapped from 8080)	Artifact repository
API	8086	REST API
UI	8090	Management interface
PostgreSQL	5432	Metadata & settings database
Valkey	6379	Distributed cache & pub/sub
Keycloak	8080	Identity provider (SSO)
Prometheus	9090	Metrics collection
Grafana	3000	Monitoring dashboards

Verify

curl http://localhost:8088/.health    # Health check
curl http://localhost:8088/.version   # Version info

Configuration

Pantera is configured via pantera.yml:

meta:
  storage:
    type: fs
    path: /var/pantera/data
  credentials:
    - type: local
      storage:
        type: fs
        path: /var/pantera/security
  policy:
    type: pantera
    storage:
      type: fs
      path: /var/pantera/security
  artifacts_database:
    postgres_host: localhost
    postgres_port: 5432
    postgres_database: artifacts
    postgres_user: pantera
    postgres_password: ${POSTGRES_PASSWORD}
  jwt:
    secret: ${JWT_SECRET}
    expires: true
    expiry-seconds: 86400

See the Configuration Reference for all options.

Documentation

Document	Description
User Guide	Installation, configuration, repository setup, auth, monitoring, troubleshooting
Developer Guide	Architecture, codebase map, adding features, testing, debugging
Configuration Reference	Complete reference for all YAML config, environment variables, and CLI options
REST API Reference	All API endpoints with examples
Contributing	How to contribute, build, test, and submit PRs
Code Standards	Coding conventions, style rules, testing patterns
Changelog	Auto1 fork changelog

Additional References

Document	Description
Okta OIDC Integration	Okta SSO setup with MFA support
NPM CLI Compatibility	NPM command support matrix across repository types
S3 Storage Tuning	S3 multipart, parallel download, disk cache configuration
Cooldown System	Supply chain security cooldown architecture
Import API	Bulk artifact import endpoint
API Routing	URL pattern support per repository type
Logging Configuration	Log4j2 external configuration and hot-reload

Attribution

Pantera is based on Artipie by the Artipie contributors, originally licensed under the MIT License. The core repository adapter patterns, storage abstraction layer, and HTTP slice architecture originate from the Artipie project. We thank the Artipie community for building the foundation that Pantera extends.

License

Copyright (c) 2025-2026 Auto1 Group Maintainers: Auto1 DevOps Team Lead Maintainer: Ayd Asraf

Licensed under the GNU General Public License v3.0.