Waystation 0.2.2

apt proxies serve package files listed under dists/. Some vendors (MongoDB, for example) publish their .deb files next to the index files instead of in pool/; these are now verified against the Packages listing, cached and served like any pool file. Together with 0.2.1's multi-segment suites, repo.mongodb.org works end to end.

Images (linux/amd64, linux/arm64, SBOM and SLSA provenance):

ghcr.io/slinkysoftware/waystation-server:0.2.2
ghcr.io/slinkysoftware/waystation-worker:0.2.2
ghcr.io/slinkysoftware/waystation-web:0.2.2

Upgrade: set WAYSTATION_IMAGE_TAG=0.2.2 and docker compose up -d --wait. No configuration changes.

Waystation 0.2.1

apt proxies now support multi-segment suites, such as MongoDB's bookworm/mongodb-org/8.0, so third-party repositories like repo.mongodb.org can be cached too.

Images (linux/amd64, linux/arm64, SBOM and SLSA provenance):

ghcr.io/slinkysoftware/waystation-server:0.2.1
ghcr.io/slinkysoftware/waystation-worker:0.2.1
ghcr.io/slinkysoftware/waystation-web:0.2.1

Upgrade from 0.2.0: set WAYSTATION_IMAGE_TAG=0.2.1 and docker compose up -d --wait. No configuration changes.

Waystation 0.2.0: first public preview

Waystation 0.2.0 is the first public preview of a free, open-source, self-hosted artifact repository: one fast pull-through cache and private registry for Docker Hub, GHCR, npm, PyPI, Maven, apt, yum/dnf, Go modules, Helm, Terraform providers and Ansible Galaxy. A lightweight alternative to Nexus Repository and Artifactory, with no component caps, request limits or licence keys.

Images

Multi-arch (linux/amd64, linux/arm64), with SBOM and SLSA build provenance:

ghcr.io/slinkysoftware/waystation-server:0.2.0
ghcr.io/slinkysoftware/waystation-worker:0.2.0
ghcr.io/slinkysoftware/waystation-web:0.2.0

Verify: gh attestation verify oci://ghcr.io/slinkysoftware/waystation-server:0.2.0 --owner SlinkySoftware

Get started

• Ten-minute try-out: Documents/Operations/TRY_IT.md
• Production deployment: DEPLOYMENT.md and the reverse-proxy recipes (nginx, Traefik, Caddy, HAProxy, Synology DSM)
• Let an AI agent deploy it: tell your agent "Deploy Waystation from https://github.com/SlinkySoftware/Waystation"; it follows AGENT_DEPLOYMENT.md
• Moving from Nexus: built-in importer and side-by-side comparison, MIGRATING_FROM_NEXUS.md

What's in it

• Formats: Docker/OCI (proxy, hosted, group; Docker Hub mirror mode, upstream aliases such as ghcr.io/...), npm (proxy, hosted, group; corepack-ready version documents), PyPI, Maven, Helm, Ansible Galaxy (proxy, hosted, group), apt (proxy), yum/dnf (proxy, hosted), Go modules and Terraform providers (proxy), raw files.
• Performance: nginx serves cached files directly; request coalescing turns a hundred concurrent misses into one upstream fetch; cache fills finish even when the client that started them disconnects.
• Security: every digest and checksum verified, bounded sizes, normalised paths, SSRF guard; signed apt/yum metadata passed through untouched; role-based access control down to the repository; local accounts with TOTP, LDAP / Active Directory and OIDC single sign-on; API tokens and service accounts.
• Operations: live dashboard and activity feed, audit log, cleanup policies, garbage collection, quotas and a low-disk guard, backup/restore tool, webhooks, Prometheus metrics, Grafana dashboard, Zabbix template, declarative YAML provisioning.

Status

Pre-1.0: interfaces may still change between minor releases, and the 1.0 security review is still to come. It already replaces a Nexus Repository instance in a home lab (Docker Hub and GHCR mirrors, apt, yum and npm for a mixed Linux fleet). Full change history: CHANGELOG.md.

Feedback, issues and pull requests are very welcome.