Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Azure DevOps Services
Azure Artifacts helps you to manage all your dependencies from a single feed. By setting up upstream sources, you can consume packages from feeds and public registries such as NuGet.org, and npmjs.com. This article walks you through setting up upstream sources in a public feed and restoring your packages.
Prerequisites
| Product | Requirements |
|---|---|
| Azure DevOps | - An Azure DevOps organization. - An Azure DevOps project. - Set your project visibility to public. |
Create a public feed
Important
Only organizations with the Allow public project policy already enabled can create projects or change the visibility of a project to public. The policy is no longer available to organizations that aren't using it already. Microsoft recommends using GitHub for all your public project needs.
A public feed is a project-scoped feed in a public project. Public feeds inherit the visibility settings of the hosting project. If you already have a public feed you can skip to the next section, otherwise create one as follows:
Sign in to Azure DevOps, then navigate to your public project.
Select Artifacts, then select Create Feed.
Provide a Name for your feed, then choose Project: YourProjectName (Recommended) as the Scope.
Select Create when you're done.
Important
Public feeds do not support upstreaming to private Artifacts feeds. You can only upstream to public registries or other Public Azure Artifacts feeds.
Add an upstream source
Now that your public feed is set up, you can start adding upstream sources. For public feeds, you can only configure public registries or other public Azure Artifacts feeds as upstream sources. Follow these steps to add an upstream source:
Sign in to Azure DevOps, then navigate to your public project.
Select Artifacts, then select your public feed from the dropdown menu.
Select the gear icon
to open your Feed Settings.Select Upstream Sources, then select Add Upstream.
Select the upstream source Type. In this example, you add NuGet.org as an upstream source, so select Public source.
Select the NuGet Gallery from the dropdown menu, then select Add.
Select Save on the right to save your new upstream source.
Important
Package lock files are required to save NuGet and Dotnet packages from upstream sources to a public feed.
Restore packages
Run the following command in your project directory to restore your packages:
Note
You must have Feed and Upstream Reader (Collaborator) or higher permissions to install new package versions from upstream sources. Anonymous users can only install packages that already exist in the feed.
Q&A
Q: I'm trying to restore my packages but I keep getting a 401 unauthorized error. Why?
The contents of a feed can only be changed by an authenticated and authorized identity with the appropriate permissions. This includes saving packages from an upstream source.
Anonymous users can download packages already saved in a feed, but cannot save new packages from upstream sources.
Project maintainers should ensure all required package versions are saved in the public feed. This can be done by restoring the project using an identity that can provide credentials when prompted and has Feed and Upstream Reader (Collaborator) or higher permissions.
If anonymous users repeatedly encounter credential prompts (401 errors), try these approaches:
Avoid using package version ranges in your project configuration. Specify explicit package versions to ensure that clients only request the exact version required.
Use lock files (where supported) so package clients only request the exact versions needed during restore or install operations.
Q: I'm restoring packages in Visual Studio, but they're coming from a different source. Why?
A: Ensure Visual Studio uses the source specified in your nuget.config file, not the local NuGet package manager. See Package sources for more details.
You can also use the NuGet CLI to force NuGet to use the source in your config file by running the following command:
nuget restore -config <PATH_TO_NUGET_CONFIG_FILE>