Design a package management strategy

In this post, I will share my study notes that I took while preparing for the exam Azure AZ400 “Design a package management strategy”.

Recommend package management tools (e.g. GitHub Packages, Azure Artifacts, Azure Automation Runbooks Gallery, Nuget, Jfrog, Artifactory)

GitHub Packages, Azure Artifacts and JFrog are the most important actors for package managers.

JFrog is the provider that supports the highest number of package managers. GitHub supports npm, Docker, Ruby Gradle and NuGet. Azure DevOps supports Maven, npm, NuGet and Python.

GitHub Packages is completely free for public repositories.

When choosing between Azure Artifact and JFrog:

Microsoft Artifact makes a lot of sense if you are using other Microsoft Azure products such as their DevOps solutions. If you are using Azure, Microsoft Artifact will integrate well with the rest of the platform, have better support (only 1 vendor to deal with), and should have better performance since the data will all be in their network. Additionally, you would not be billed for a data out transfer to create and store the artifact.

On the other hand Artifactory is designed to be more technologically agnostic. It will integrate with major cloud providers (Azure, Google, AWS) and supports many different types of technologies. However, there will be some setup and…