We can't say it enough. We have the best customers. We have an incredible support network in Belfast, Dublin, London and San Francisco. None of Cloudsmith's success in 2019 would have been achieved without 

Alan, Lee, Peter & the team at Cloudsmith.


At Cloudsmith, our goal is to make it as easy as possible to get your packages into our system from where you can manage and distribute them according to your needs.

CircleCI is a continuous integration and delivery platform that helps teams release quality code, faster. They provide a mechanism for users to share code and libraries which can be reused across pipelines called "orbs".

Cloudsmith provides first-class support for CircleCI with our official 

. Using the orb, users can easily integrate publishing to Cloudsmith with their existing CircleCI workflows.

Full reference documentation for the orb can be found on the 

. This documentation is automatically generated from the orb itself and so is guaranteed to always be up to date with the latest release of the orb.

To use the orb you must first ensure you are using Circle version 2.1. At the top of your 

You'll need to configure authentication credentials for the orb. To do so, you can add an environment variable named 

 within the CircleCI settings page for your project:

The orb (for now) requires that you have already built the package you wish to publish. Assuming you're publishing a Python library (though the same process applies to any package type), you'll want to run 

Once built, we can use the orb to easily publish the package. The orb provides a number of commands to make this process simpler. We'll first ensure the Cloudsmith CLI is configured and installed, then after we've built the package, publish it:

Putting this all together, we end up with a 

Our official orb provides simple integration for the majority of standard CI usecases, but we know that it won't fit every purpose. For additional flexibility users can mix and match commands provided by the orb and/or use the Cloudsmith CLI directly.

For example, to use the orb to install and configure the CLI, but then use the CLI directly to publish to Cloudsmith, your configuration might look like so:

As always, if you have any questions about integration or would like some general advice, please 

Cloudsmith + CircleCI

It's an exciting day at Cloudsmith HQ, today we're launching beta support for hosted private LuaRocks module repositories.

Created in Brazil in the early 90s, Lua is a lightweight language, designed primarily for embedding into other applications. Lua has a focus on speed, portability and extensibility, making it the perfect choice in many situations. Lua works equally well on all major platforms, whether you prefer Linux, Mac or Windows.

LuaRocks is the package manager for Lua. LuaRocks is responsible for downloading, building and installing dependencies, known as Rocks. The primary source of open-source LuaRocks is the 

. LuaRocks.org is a community-run hosting service for Lua modules and provides a valuable resource which is central to the Lua ecosystem. Anyone can upload Rocks for distribution, either in the main repository or in a per-user repository which is provided by the service.

Whilst LuaRocks.org is the main repository for rocks, LuaRocks provides all the necessary tooling and configuration flags to easily allow pointing at another repository if needed. Cloudsmith, as of today, can provide an alternative repository for hosting your rocks as needed.

There are a number of great reasons you may wish to run your own private repository:

To develop Lua modules internally and share them privately to other teams.

To distribute and deploy your own Lua modules in a pipeline at your org.

To distribute Lua modules as vendored software (i.e. maybe commercially).

To make modifications to public Lua modules, without republishing publicly.

To mirror public Lua modules, to isolate from uncontrolled upstream issues.

To capture the exact state of your dependencies at a particular version/release.

To control (whitelist/blacklist) the exact Lua modules allowed for your org.

To keep track of the exact versions/releases of Lua modules you have/use.

If you're interested in the possibilities that hosting your own rocks brings, then Cloudsmith is here for you. Sign up today to begin hosting and distributing your Lua modules at the world's first hosted private Lua modules repository service.

Getting started with Cloudsmith and LuaRocks couldn't be simpler. First, you'll need a Cloudsmith account and a repository to which you can upload your modules.

If you need to install Lua and LuaRocks you can find instructions on the 

Cloudsmith should work with all supported versions of LuaRocks, but we reccomend using at least 

 for the best experience. You can check your local version like so:

Next, you'll need a rock for uploading to Cloudsmith. LuaRocks has several methods for doing so, you can create source, binary or metadata-only rocks. For full documentation on creating your own rocks, see the tutorial on the 

For demonstration purposes we'll use a rock from LuaRocks.org named 

Next, you can push the module to Cloudsmith using the 

. We don't yet support uploading modules with 

, but we'll be adding support in a future release (if you want it, please let us know). For now, use the CLI.

First, ensure you've installed the Cloudsmith CLI and configured authentication:

Then, use the CLI to upload the module, which operates like 

Your repository should now contain the uploaded modules. An example of which is our official Cloudsmith examples repository (this is where we upload our examples to), as shown below:

Installing packages from a custom LuaRocks server couldn't be simpler, we only need to pass a single command-line argument to specify the location of the custom repository:

If required, you can configure the repository centrally in your 

It really is that simple, and now you've sourced a module privately from your very own private Lua module repository on Cloudsmith. Well done!

Cloudsmith provides fully featured Lua module repositories on all plans, flexible enough for use whether you’re hosting public modules for a public or open source project, or private modules for your company’s internal needs. We're extremely proud to be able to support the Lua ecosystem with this tooling.

You can find further, context-specific information, including detailed setup and integration instructions inside each Cloudsmith repository. You can see an example of this documentation in our 

Lua ROCKS!

Cloudsmith has been officially approved for G-Cloud 11. We help organisations secure and accelerate their pipelines with a universal storage solution for packages and containers covering the following formats: Alpine, Cargo, Composer, Debian, Docker, Gradle, Helm, Maven, npm, Python, RedHat, Ruby, Sbt, Vagrant, raw and more.

G-Cloud is a UK Government framework which enables the public sector to procure cloud and other services via the 

. The Digital Marketplace helps the public sector find cloud technology and specialist services for digital projects.

Cloud Software > Software Development Tools

https://www.digitalmarketplace.service.gov.uk/g-cloud/services/783759974166175

Cloudsmith + G-Cloud 11

We've had an incredible amount of growth over the past year, both as a service and as a business, establishing ourselves as a best-in-class solution for Cloud-based Package Management, and you've played a huge role in helping us get there. We couldn’t have done it without your support. Thank you so much!

As Cloudsmith has evolved we’ve added deeper and broader value across our service, all based on the needs you’ve told us about, while still adhering to our ethos of being simple, managed and secure, by default. Throughout this time our pricing has remained largely static and unchanged.

Cloudsmith is built by engineers, for engineers; and there is nothing we want more than to make the best Package Management service the world has to offer. Pricing still matters, of course, as we re-invest our revenue back into making the service even better. Every cent earned is a cent that empowers and develops Cloudsmith.

So after years of research, development, communication, effort and emotional toil, we're extremely proud to announce new pricing that is adaptive and flexible, while still offering world-class value. With the new plans comes new scope for exciting new developments; changes that will benefit every single user.

 please; here are the new plans for Cloudsmith ...

The new plans are designed to help new users select their most relevant persona and give maximum value of the ever-expanding feature range we support.

is for individual teams and small companies, who need best-in-class Package Management.

is for multi-teams and scaling companies, where extended visibility and controls are also needed.

is for larger (or stricter) companies where deeper capability for compliance, support and service guarantees are mandatory.

Due to (extremely) popular demand we have introduced a 

 (SLA) guarantee for Ultra+ plans. Please note the 

 have been tweaked to support SLA. We’ll also be introducing annual-based pricing, as well as additional tweaks to make account management even easier.

It is important to us to say we are extremely proud to have every individual that uses Cloudsmith and derives value and that will never change; no matter what plan you're on, we'll do our best and work our hardest for you.

Calling all Ultra Velocity Teams

We've had an incredible amount of growth over the past year, both as a service and as a business, establishing ourselves as a best-in-class solution for 

, and you've played a huge role in helping us get there. We couldn’t have done it without your support. Thank you so much!

So without further ado, drum-roll please; here are the new plans for Cloudsmith ...

 is for individual teams and small companies, who need best-in-class Package Management.

 is for multi-teams and scaling companies, where extended visibility and controls are also needed.

 is for larger (or stricter) companies where deeper capability for compliance, support and service guarantees are mandatory.

Due to (extremely) popular demand we have introduced a Service-Level Agreement (SLA) guarantee for Ultra+ plans. Please note the Terms and Conditions have been tweaked to support SLA. We’ll also be introducing annual-based pricing, as well as additional tweaks to make account management even easier.

Introducing Teams, Velocity and Ultra!

TL:DR; Puppet, Inc. is one seriously classy company.

When we coined the name Cloudsmith it was supposed to be the product name for the tool we were building; a sort of kitchen-sink approach to building FinTech software. At some point, sick of uncovering unknown-unknowns, we jacked it in and focused on building the world's greatest cloud-native package management solution instead. A journey we are still on today.

The name was derived from our existing company brand at the time, connotations from blacksmithing (making things) and our ethos of building absolutely everything we do around the cloud itself. It was perfect to describe what were trying to achieve.

With a quick google, we learned that Puppet, Inc. had acquired a growing tech startup also called Cloudsmith back in 2013. They had absorbed the technology, dropped the name and redirected the dot com back to Puppet - a common move when integrating an acquisition - but it was a strong signal that name was available to be reused by someone else.

Building an online brand is hard. It is hard to find a combination, 

, that works and aligns something short, clean and 

 across the registered company name, domain names and the various social media outlets required to build a business today.

We took the risk and joined the latest wave of tech startups adopting the newly minted .io domain extensions. We registered the trademark in the UK and then quickly backed that up in the US. We rebooted the company as Cloudsmith and registered 

 as our primary domain - dreaming that one day we might get the dot com 

That day arrived. May 4th, 2019. Star Wars Day.

Post some investment at the start of the year; one of our goals was to push the brand forward and the dot com was at the top of the list. And while we knew there was a "legal" trademark route - it always felt impersonal and the wrong option for us.

An opportunity arose where we were offered a warm introduction to Puppet's CEO, Yvonne Wassenaar, who could not have been more accommodating. We chatted about Belfast (Puppet operate in Belfast also), Brexit, the tech ecosystem, partnership and lastly the elephant in the room. She was happy to put us in touch with the relevant people in the team. With emails traded and a video call to (rightly) clarify we weren't crazies; the transfer of the 

We would like to offer our sincere thanks to our new friends Yvonne, Tim, Nick, Dan and Michael for being awesome and highlight the professionalism and collective spirit that resides within Puppet and the wider developer community.

And lastly, on a personal note, there is nothing more impressive to me than people who lean in and ask "how can I help?".

By The Numbers (2019)

More articles

Cloudsmith + CircleCI

Lua ROCKS!

Cloudsmith + G-Cloud 11

Calling all Ultra Velocity Teams

Introducing Teams, Velocity and Ultra!

Class Dot Com