Setting Up Cold Artifact Storage

---

Steps for Setting Up Cold Artifact Storage Using the Platform UI

Step 1: Set up a Live Artifactory Instance

The Live Artifactory instance can be a newly installed instance or an existing instance that must be configured as follows.

1. Open theArtifactory System YAMLfile of the instance.

2. Add theshared.jfrogColdStorage.coldInstanceEnabledproperty and set it asfalseto configure the instance as the Live instance.

Step 2: Create a Cold Artifactory Instance

On the Artifactory instance that you are designating as the Cold instance, perform the following steps:

1. Update theArtifactory System YAMLfile:
   Add theshared.jfrogColdStorage.coldInstanceEnabledproperty and set it astrueto configure the instance as the Cold instance.
   

   shared: jfrogColdStorage: coldInstanceEnabled: true

2. Configure the Archive Binary Provider:
   When setting up the Cold instance, you will need to connect it to a binary storage provider. You can use one of the following storage options:

   • Self-hosted Storage: If you wish to use the local file system, seeConfiguring the Filesystem Binary Provider.

   • Amazon S3 Glacier Cloud Storage: If you wish to use Amazon S3 Glacier, follow these steps:

     1. Openthebinarystore.xmlconfiguration file located in the$JFROG_HOME/artifactory/var/etc/artifactoryfolder.

     2. Specify thes3-storage-v3-archivechain.

     3. Within the chain, define the standard Amazon S3 Binary Provider template as outlined in the sectionAmazon S3 Official SDK Templateand configure the parameters as per your requirements.
        

        Example

        s3-storage-v3-archive Template

          //Dedicated Cold Storage parameters  //Based on s3-storage-v3 Template artifactory-ice-test-regular-bucket artifactory-on-ice creds ident aws-s3 eu-central-1  

3. Restart the Cold Artifactory instance:
   After making the above changes, restart the Cold Artifactory instance for the changes to take effect.

步骤3:添加生活and Cold Artifactory Instances to Mission Control

In this step you will need to add both instances to Mission Control. If Mission Control is enabled in the instance that you have designated the Live instance, then you will only need to do this step for the Cold instance.

1. First,create a binding token for Mission Control by following the steps inPairing Tokens(available from Artifactory 7.29.7).

2. Next,add the Cold Artifactory instance to Mission Control by following the steps detailed inRegistering a Platform Deployment.

3. If the Live Artifactory instance you set up above isnot詹妮弗的Mission Control enabled it it, add the Live Artifactory instance to Mission Control in the same way.

Remember to copy the token you generate to a location where you will be able to find it easily.

Step 4: Bind the Live and Cold Artifactory Instances

Available from Artifactory 7.38.4

After completing the previous two steps, your Platform Deployments will have two JPDs that are both connected to the Mission Control microservice: the Live instance and the Cold instance. The next step will be to bind the two instances to each other so that theCold Artifactory instance will trust and receive requests from the Live Artifactory instance. You can only bind one Live instance to one Cold instances, and this is aone-way trust.

Perform the following steps on the Artifactory instance that you have set as the Live instance.

1. From theAdministrationmodule, clickPlatform Deployments | Bindings.
2. Click theCold Storagetab. In the top right corner, click+ Add Binding, and selectCold Storagefrom the dropdown list.
   
   This displays the Create Binding window.
   
3. From the Source JPD dropdown, select the Live instance.
4. From the Target JPD dropdown, select the Cold instance.
5. ClickApply.
   The Summary displays the target and source you selected.
   
   

6. ClickCreateto create the new binding.
   The binding results are displayed.
   

---

Setting Up Cold Artifact Storage Using APIs

The preferred method of binding the two instances is using the flow described above. However, you can also bind them using the API steps described below.

1. First generate the Pairing Token to connect the Live and Cold instances.

2. On the Cold instance, execute the following POST request.

   curl -u admin:password -X POST https:///artifactory/api/v1/service_trust/pairing/artifactory-cold

   This generates the pairing token. For example:
   

   { "pairing_token":"IiwiYWxnIjoiUlMyNTYiLCJraWQiOiJaWkhkQzBzenlqd2d..." }

3. Next, on the Live instance, use the generated pairing token to execute the following PUT request. This sets up trust between the Live instance and the Cold instance:
   

   curl -u admin:password -X PUT -H "Content-Type: application/json" -d '{"pairing_token" : "IiwiYWxnIjoiUlMyNTYiLCJraWQiOiJaWkhkQzBzenlqd2d..."}' https:///artifactory/api/v1/service_trust/pairing/artifactory-cold

   If the two instance are paired successfully, the request returns the following status:
   

   Trust with service artifactory-cold was established successfully

---

Managing Cold Storage Bindings

Revoking a Binding Using the Platform UI

1. To revoke the binding between a Live and Cold instance, from the Administration module, clickPlatform Deployments | Bindingsand then click theCold Storagetab.
   
2. Select the checkboxes for the bindings you wish to remove, and then click the删除button to the right of the binding.
3. If you are deleting multiple bindings, select all checkboxes, and at the bottom of the window, select删除.
   This displays a confirmation message that asks if you are sure you wish to remove the binding.
4. ClickOK来确认。
   Your action is applied and the results of the unbinding are now displayed.
   

Re-establishing Trust

Each connection between a Live instance and a Cold instance is bound to a namespace in the Cold instance, which is generated during the paring process. The namespace is unique and the trust is established for that specific namespace.

This namespace is required when you need to re-establish the trust between the Live and Cold instances, for example, after the token was revoked by mistake. In such scenarios:

1. Retrieve the namespace.
2. Regenerate the pairing token by providing the namespace as an argument in the POST request.

Example:curl -u admin:password -X POST https:///artifactory/api/v1/service_trust/pairing/artifactory-cold/gbbxmcuj

Where:gbbxmcujis the namespace.

---

Optimizing Cold Artifact Storage Performance

Cold Artifact Storage includes several properties that can be used to configure and optimize its performance.

Live Artifactory Properties

The following properties can be configured in theLive Artifactory's$JFROG_HOME/etc/artifactory/artifactory.system.propertiesfile.

Cold Artifactory Properties

The following properties can be configured in theCold ArtifactorySystem YAML.

The following property can be configured in theCold Artifactory's$JFROG_HOME/etc/artifactory/artifactory.system.propertiesfile.