Apache Archiva is a build artifact repository manager from the Apache Software Foundation. It sits between your builds and the outside world, holding two kinds of repository: managed repositories, where your own build output is deployed, and remote repositories, which Archiva proxies and caches on behalf of your builds through proxy connectors. Point a build's settings at Archiva and every dependency it consumes arrives through a server you operate, log and can serve when the upstream is unreachable.
Archiva is a Java application, deployed standalone with an embedded servlet container or as a WAR into an existing one. Security comes from Apache Redback, which supplies users, roles and permissions with optional LDAP or Active Directory authentication, and the permission model is repository-scoped — a role grants observer or manager rights on specific repositories rather than globally. A background scanner walks each repository and hands artifacts to configurable consumers that build search indexes, update metadata, validate layout and detect content that does not belong. Purge rules on each managed repository control how many snapshot versions survive and for how long.
The honest positioning matters. Apache Archiva is Maven-shaped: it does Maven and Ivy-style repository layouts genuinely well, and it does not attempt the format breadth that Nexus Repository and Artifactory offer — there is no first-class Docker registry, npm registry or PyPI index. Its release cadence has been intermittent for several years, so anyone evaluating it today should check the project's current status before committing. For a Maven-only estate that wants a small, self-hosted, Apache-licensed proxy and deployment target, it remains a reasonable and inexpensive choice. For a polyglot estate, it is the wrong tool and this course says so directly.
Why this skill matters now
Two populations need Archiva skills, and they need different things. The first already runs it — frequently a server installed years ago that quietly became critical, with an administrator who has left. Those teams need to operate it properly: upgrades, backup and restore, security configuration, purge rules that stop the disk filling, and proxy connectors that behave when an upstream repository changes its URL or its TLS configuration.
The second population is evaluating repository managers and needs an honest comparison rather than a vendor pitch. Repository managers are not interchangeable: format coverage, high availability, replication, retention policy expressiveness and integration with component-intelligence tooling differ sharply, and the cost of choosing wrong is a migration of every build in the organisation.
Either way the underlying skill is the same and it outlives the product: understanding what a repository manager is for, how proxying and caching change build reliability, how deployment and release promotion should work, and what a retention policy has to guarantee. This course teaches Archiva concretely and that model transferably — including the migration path, because for a meaningful share of teams the correct outcome is to move on.