OneDev

OneDev is a self‑hosted DevOps platform that consolidates source control, continuous integration/continuous delivery (CI/CD), issue tracking, and package management into a single Java‑based application. From a developer’s perspective, it exposes a unified REST API and GraphQL endpoint that allow programmatic access to every core function—commits, branches, pipelines, artifacts, and even code‑review annotations. The platform is designed to run inside a Docker container or directly on any JVM‑capable host, making it suitable for both small teams and large enterprises that require full control over their build pipelines and repository security.

Technical Stack

• Language & Runtime: Java 17, Spring Boot framework for the web layer, and Hibernate/JPA for ORM.
• Database: PostgreSQL is the default relational backend, but MySQL and MariaDB are also supported via JDBC.
• Search & Indexing: Embedded Lucene indices provide fast, language‑aware code search across all commits.
• Containerization: Official Docker images are available; the app ships with a docker-compose.yml that provisions PostgreSQL, Redis (for caching and job queues), and the OneDev service.
• CI/CD Engine: Built on top of a custom pipeline runner that executes steps in isolated Docker containers, with support for parallel stages and conditional execution.
• Security: Integrates OWASP Dependency‑Check, Trivy, and custom secret scanners as part of the pipeline; also supports role‑based access control (RBAC) at both project and branch levels.

Core Capabilities

• Source Control: Git server with full push/pull support, branch protection rules, and web‑hook triggers for external services.
• Pipeline Management: Declarative YAML pipelines that support caching, artifacts, matrix builds, and auto‑merging of PRs after successful tests.
• Code Review & Annotation: Pull requests can be annotated with test coverage percentages, static analysis results, and security findings directly in the diff view.
• Package Registry: Native support for Maven, npm, and Docker images, all stored in the same PostgreSQL database.
• Search & Navigation: Symbol‑level navigation across all commits, regex search, and an integrated “find in files” feature that respects language syntax.
• Extensibility: A plugin SDK allows developers to write Java modules that hook into events (e.g., onCommit, onPipelineStart) and expose new UI components or REST endpoints.

Deployment & Infrastructure

OneDev’s architecture is micro‑service‑friendly: the core application, database, and Redis can be split across Kubernetes pods or Docker Swarm services. The Docker image is lightweight (~300 MB) and can be scaled horizontally by adding replicas; the PostgreSQL instance can be upgraded to a managed cluster for high availability. The platform also supports TLS termination via an external reverse proxy (NGINX, Traefik) and integrates with LDAP/Active Directory for single‑sign‑on.

Integration & Extensibility

• Webhooks: Trigger external services on events such as push, merge_request_merged, or pipeline_success.
• REST & GraphQL APIs: Full CRUD access to projects, branches, pipelines, and artifacts.
• Plugin System: Developers can bundle JARs that are automatically discovered at startup; the SDK includes listeners, UI extensions, and custom tasks.
• Renovate & Dependabot: Built‑in integration with Renovate for automated dependency updates via pull requests, including auto‑merging once CI passes.

Developer Experience

The configuration is declarative and versioned: application.yml holds global settings, while each project can override with its own .onedev.yaml. The documentation is organized into a comprehensive online help center, and the community is active on GitHub Issues and Discord. The API documentation is auto‑generated with Swagger/OpenAPI, making it easy to generate SDKs in multiple languages.

Use Cases

• Enterprise CI/CD: Replace disparate GitLab, Jenkins, and Nexus stacks with a single JVM‑based solution that keeps all artifacts in one place.
• Security‑First Development: Leverage built‑in scanning and compliance checks to enforce security policies before code merges.
• Rapid Prototyping: Deploy a lightweight Docker stack in minutes for internal tools or open‑source projects that need a full DevOps pipeline.
• Compliance Auditing: Use the audit logs and code‑review annotations to satisfy regulatory requirements for traceability.

Advantages

• Performance: Java’s mature ecosystem and efficient JVM lead to fast pipeline execution and quick UI rendering, even on modest hardware.
• Flexibility: The plugin SDK and declarative pipelines allow teams to tailor the platform to niche workflows without vendor lock‑in.
• Licensing: Open‑source under the Apache 2.0 license, with optional commercial support for enterprises that need SLA guarantees.
• Unified Tooling: Eliminates context switching by combining source control, CI/CD, issue tracking, and package management in a single application.

In summary, OneDev offers developers a fully integrated, self‑hosted DevOps stack that is both feature‑rich and highly extensible. Its Java foundation, combined with a modern micro‑service deployment model and robust plugin architecture, makes it an attractive choice for teams that value control, performance, and a seamless developer experience.