Web interface

The Galleon web interface is available at the instance address (https://<GALLEON_HOST>). It lets a user browse repository contents, download and upload artifacts, and manage their own profile.

The interface is available in English and Russian. The language is switched with the “Interface language” list in the header, and on the sign-in page — on the sign-in card. The choice is remembered in the browser: it is not tied to the account and does not travel to another browser or device. On the first visit the language follows the browser settings. Server messages, the text of a rejection, for example, stay in English.

Signing in

To sign in, enter “Username” and “Password” on the login page and click “Sign in”. After signing in, the “Browse” section opens.

Without signing in, only browsing is available — and only if the administrator has enabled anonymous access. The “Upload” and “Settings” links appear in the header after signing in.

Browsing content

The “Browse” section shows cards of the repositories available to you (name, format, type). Repository content is displayed as a tree (for the component and asset model, see Repositories and formats):

• folders (▪) — group the content: Maven groups, package namespaces, images;
• components (◆) — package versions and image tags;
• index files (▤) — service files that Galleon generates itself (for example, maven-metadata.xml).

In Docker (OCI) repositories the image content is laid out in groups: tags/ — the tags, manifests/ — the manifests those tags resolve to (several tags of one manifest are shown as a single row). The layers and configs are collected into a separate blobs/ branch at the repository root: they belong to the repository rather than to an image, and the same layer may be used by several images.

Selecting a node opens a detail panel on the right:

• for a component — coordinates, format metadata (package description and dependencies, image platforms and layers), and the list of assets;
• for an asset — size, content type, checksums (SHA-256, SHA-1, MD5, SHA-512), dates, and for proxy repositories — the source URL and the cache expiry.

One of the dates is “Last downloaded” — when the file was downloaded last. The “Never” value means it has not been downloaded a single time, and “Not tracked” means downloads are not recorded: container image layers are marked this way, because they are shared across all the images of the repository.

The “Download” button downloads an asset. The “Load more” button loads the next page of long lists.

The “Delete component” and per-asset “Delete” buttons require the delete privilege. Under the DENY write policy a deletion is rejected regardless of privileges: such a repository is read-only. Deletion is irreversible; when the last asset is deleted, the component is removed automatically. Container images have deletion rules of their own — see Docker (OCI).

Uploading

The “Upload” section uploads files to hosted repositories of the Maven, npm, RubyGems, PyPI, and raw formats. The form adapts to the format of the selected repository:

• Maven — coordinates (groupId, artifactId, version), files with the classifier and extension fields, the generate-pom flag;
• npm and RubyGems — only the package file (.tgz or .gem): the name and version are read from its metadata;
• PyPI — distribution files (a wheel or an sdist); the name and version may be omitted — they are read from the metadata;
• raw — the destination directory (directory), the file name (filename), and the file itself.

Uploading requires the add privilege on the repository. Repositories of the Go, Docker (OCI), and Cargo formats accept publications only from the standard clients (see Formats).

Profile

The “Profile” page opens from the avatar menu and contains the following sections:

• Roles — the roles assigned to you;
• Account — account details; for local users they are editable with the “Edit” button;
• Password — changing the password with the “Change password” button (the current password is required);
• User token — the token for clients and CI (see Credentials);
• Sessions — active sessions: the current one can be ended (“Logout”), any of the others can be revoked (“Revoke”), and all but the current one — at once (“Log out other sessions”).

The “Settings” section in the header is meant for administration — it is described in the Administration guide.