JFrog Artifactory Repository Types: Local, Remote, and Virtual – Capabilities Table

DevOps

MOTOSHARE 🚗🏍️
Turning Idle Vehicles into Shared Rides & Earnings

From Idle to Income. From Parked to Purpose.
Earn by Sharing, Ride by Renting.
Where Owners Earn, Riders Move.
Owners Earn. Riders Move. Motoshare Connects.

With Motoshare, every parked vehicle finds a purpose. Owners earn. Renters ride.
🚀 Everyone wins.

Start Your Journey with Motoshare

JFrog Artifactory Repository Types: Local, Remote, and Virtual – Capabilities Table

Feature / OperationLocal RepositoryRemote RepositoryVirtual Repository
Primary UseStore organization’s own (first-party) build artifactsProxy/cache artifacts from remote third-party repositoriesSingle aggregated endpoint mapping to one or more local/remote repositories
Write (Deploy) ArtifactsYes – artifacts are uploaded/published by users, CI/CD, build toolsNo – direct deploy/upload not supported (only proxy/caching)No – artifacts cannot be deployed directly to a virtual repo; must target underlying local repo
Read (Download) ArtifactsYes – download by any authorized user or processYes – fetches/caches requested artifacts from remote source on-demandYes – acts as a unified endpoint for read/download from all mapped repos (local and remote)
CachingNo – only contains what is uploaded directlyYes – caches remote artifacts locally after first accessInherits cache of mapped remote repositories
Direct Sync/ReplicationYes – supports push/pull replication to other Artifactory instancesNo – cannot be a source/target for replication (except indirect offline mode)No – managed at the underlying repo level
Content Delete/ModifyYes – authorized users can move, update, or delete artifactsNo – cannot modify or delete cached artifacts directly; cache can be expired/clearedNo – actions must be performed on the underlying actual repo
Retention PoliciesYes – customizable retention, expiration, and cleanup policiesYes – can expire cached artifacts as per cache policyInherited from target repositories
Security/Access ControlFull RBAC, permissions, and policy enforcementRBAC applies to access, but content is as trusted as remote sourcePolicy enforcement at the virtual repository level (applies RBAC and rules to all mapped repos)
Supports Metadata/TaggingYesLimited; some metadata from upstream may be missingYes – for artifacts visible through mapped repos
Can Serve as DistributionYes – recommended for delivery of organizational releasesYes – improves reliability for up/downstream open source and external dependenciesYes – virtuals are best for developers and automation: one unified URL for all artifacts
Artifact Scanning (SCA/Security)Yes – full scan on uploaded artifacts with appropriate licenses/toolsYes – scans on cached artifacts (post-download); risk inherited from original sourceInherits scanning as applied to mapped underlying repos
Typical Examplesinternal/libs-release-local, docker-localmaven-central-remote, npmjs-remote, pypi-remotelibs-release, all-docker (maps both local “docker-local” and remote “docker-hub-remote”)
Best PracticeUse for all builds produced by your teamsProxy all required third-party remotes for speed, reliability, consistent complianceExpose a virtual repo per ecosystem (e.g., Maven, npm, Docker) for simplified client configuration and access control
Can Aggregate Multiple ReposNoNoYes – can aggregate multiple local and/or remote repos, and present as a single logical repository
Direct Artifact PromotionYes – supports promotion workflows, moves/copies between local reposNo – cannot promote (only cache/clear)No – must perform artifact promotion on the underlying local repo
Requires External InternetNo – fully internalYes, to fetch uncached artifactsDepends on mapped remotes: if only local repos are mapped, no internet needed
Can Set as Build TargetYesNoYes – but artifacts end up in mapped local repository, not in the virtual repo itself

Key Takeaways

  • Local repositories are for internal artifact management—store, manage, promote, and distribute your own production artifacts.
  • Remote repositories act as trusted proxies/caches for public or third-party dependencies, improving reliability, security, and performance.
  • Virtual repositories are powerful logical aggregators: expose a unified URL for developers, automate policy enforcement, and simplify repo configuration by hiding backend complexity.

Each type has a distinct role. Using them together streamlines software delivery, reinforces artifact governance, and ensures robust DevOps security and compliance.

Add to follow-up

Check sources

Subscribe
Notify of
guest

This site uses Akismet to reduce spam. Learn how your comment data is processed.

0 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
0
Would love your thoughts, please comment.x