Skip to content
SPECIFICTION
Get listed

aptly

aptly.info

Free plan macOSLinuxAPISelf-hosted
Visit aptly.info
Spec score 8.8 #6 of 64 in Artifact repository software

What it is

aptly manages Debian package repositories and publishes controlled package sets for systems that use apt. It can mirror remote repositories, maintain local repositories, pull selected package versions with dependencies, and publish repositories. Immutable snapshots can be compared, merged, filtered, searched and used to create repeatable package environments with controlled changes and rollback to earlier versions. Mirroring supports regular and flat repositories over HTTP(S) and FTP, with filters for architectures, components and packages. Packages from mirrors and local repositories are kept in a deduplicated pool that can be searched and cleaned up. Repositories can be published to local storage, Amazon S3, OpenStack Swift, Azure or JFrog Artifactory Storage, and signed with a user-provided GnuPG key. aptly is free and available as a CLI tool and HTTP REST service. Its REST API has no authentication or protection, and the embedded web server is described as unsuitable for production use.

Spec sheet

Purpose
aptly manages Debian repositories by mirroring remote repositories, managing local package repositories, taking snapshots, pulling package versions with dependencies, and publishing repositories.Read 9 Oct 2026 · aptly.info
Intended users
The overview describes aptly as a tool for maintaining repeatable, controlled package environments and publishing repositories consumed by apt on Debian systems.Read 9 Oct 2026 · aptly.info
Integrations
The integrations page lists community tools and examples including Molior, OpenAPT, Docker, Ansible, Chef, Puppet, and SaltStack.Read 9 Oct 2026 · aptly.info
Support
Community support is available through the aptly-discuss mailing list, the GitHub issue tracker, and the listed chat channel; commercial support can be requested by email.Read 9 Oct 2026 · aptly.info
API security
The REST API documentation warns that the API has no authentication or protection and should not be exposed to the internet without a proxy that adds HTTPS and authentication.Read 9 Oct 2026 · aptly.info
Cloud storage
Repositories can be published to Amazon S3, OpenStack Swift, Azure, or JFrog Artifactory Storage.Read 9 Oct 2026 · aptly.info
Download caveat
The site says Debian and Ubuntu packages may lack some features depending on available Go dependencies.Read 9 Oct 2026 · aptly.info
Download platforms
The download page lists packages for Debian and Ubuntu, Homebrew for Mac OS X, and binary releases for Linux, macOS, and FreeBSD.Read 9 Oct 2026 · aptly.info
Free availability
The site says aptly can be tried for free and is available as a CLI tool and an HTTP REST service.Read 9 Oct 2026 · aptly.info
Linux packages
The download page provides packages for Debian and Ubuntu distributions, including bullseye, bookworm, trixie, focal, jammy, noble, and resolute.Read 9 Oct 2026 · aptly.info
Other downloads
The download page lists binary releases for Generic Linux, FreeBSD, and Mac OS X, and Homebrew installation for Mac OS X.Read 9 Oct 2026 · aptly.info
Package storage
Packages from mirrors and local repositories are stored in a deduplicated package pool that can be searched and cleaned up.Read 9 Oct 2026 · aptly.info
Production serving limit
The embedded aptly serve web server is described as unsuitable for production use.Read 9 Oct 2026 · aptly.info
Project history
The aptly project was founded by Andrey Smirnov in 2013 and has received contributions from more than 45 developers.Read 9 Oct 2026 · aptly.info
Publishing destinations
Repositories can be published to local storage, Amazon S3, OpenStack Swift, Azure, or JFrog Artifactory Storage.Read 9 Oct 2026 · aptly.info
Repeatable package environments
aptly creates fixed package sets for deterministic installation and upgrades, with controlled changes and rollback to earlier versions.Read 9 Oct 2026 · aptly.info
Repository mirroring
It mirrors regular and flat repositories over HTTP(S) and FTP, with options to select architectures, components, and packages using filters.Read 9 Oct 2026 · aptly.info
Repository publishing
Published repositories can be served over HTTP, FTP, or rsync, and can be consumed directly by apt.Read 9 Oct 2026 · aptly.info
Repository signing
Published repositories are signed with a user-provided GnuPG key, which must be generated before publishing.Read 9 Oct 2026 · aptly.info
REST API
Aptly provides a REST API for managing repositories, snapshots, published repositories, and package uploads.Read 9 Oct 2026 · aptly.info
Snapshot operations
It can compare, merge, filter, and publish snapshots, and pull selected package versions with dependencies into a snapshot.Read 9 Oct 2026 · aptly.info
Snapshots
Snapshots are immutable and can be merged, filtered, compared, searched, and used to pull packages along with dependencies.Read 9 Oct 2026 · aptly.info

Plans and prices

Aptly Free Free to try · CLI tool · HTTP REST service Read 9 Oct 2026 · aptly.info

Every aptly plan and price →

Strong points and limits

Strong points

  • Creates immutable snapshots that can be compared and merged.
  • Pulls selected package versions with dependencies.
  • Publishes repositories to local storage and listed cloud destinations.
  • Available free as a CLI tool and HTTP REST service.
  • Packages are held in a deduplicated pool.

Limits

  • REST API has no authentication or protection.
  • Embedded web server is unsuitable for production use.
  • Publishing requires a user-provided GnuPG key.
  • Debian and Ubuntu packages may lack features based on Go dependencies.

Who it suits

aptly suits people maintaining Debian repositories who need repeatable package sets, snapshots and controlled publishing. It is also suited to teams managing repositories through its CLI or REST API, provided they account for the API's security warning.

Verdict

aptly provides tools for mirroring, snapshotting and publishing Debian repositories, including several storage destinations. Its free availability is clear, but the API warning and production limitation on the embedded server matter when planning deployment.

Where Specifiction places it

Alternatives to aptlyAll alternatives →