Uploaded image for project: 'Documentation'
  1. Documentation
  2. DOCS-15197

[C/OM] Update PGP key location in documentation

    • Type: Icon: Task Task
    • Resolution: Done
    • Priority: Icon: Minor - P4 Minor - P4
    • None
    • Affects Version/s: None
    • Component/s: Ops Manager
    • Labels:

      This ticket is to update the links to PGP in mms docs. It needs to be done only after the DOCS-15195 is done.
      As noted in the ticket, there are keys associated with Ops Manager. If we mention those keys in the OM docs we'd need to update those URLs. From Jeff: I'm not sure if those keys are mentioned / linked to in the docs, but wanted to flag this ticket in case we need to clone it for Ops Manager updates.

      From Julia: Here is a list of search results for PGP in the mms-docs (8 topics and not all will need updates).

      1. config/replacement.yaml:
        130 pem: ":abbr:`PEM (Privacy-Enhanced Mail)`"
        131: pgp: ":abbr:`PGP (Pretty Good Privacy)`"
        132 pii: ":abbr:`PII (Personally identifiable information)`"

      2 source/includes/steps-install-simple-test-deployment.yaml:
      72 enabled=1
      73: gpgkey=https://www.mongodb.org/static/pgp/server-5.0.asc
      74

      3 source/includes/steps-prepare-servers-basic-install.yaml:
      25 enabled=1
      26: gpgkey=https://www.mongodb.org/static/pgp/server-4.2.asc" | sudo tee -a /etc/yum.repos.d/mongodb-org-4.2.repo
      27

      4 source/includes/steps-verify-om-deb-package.yaml:
      15 replacement:
      16: keyfile: https://www.mongodb.org/static/pgp/opsmanager-{manifest-version}.asc
      17

      5 source/includes/steps-verify-om-rpm-package.yaml:
      15 replacement:
      16: keyfile: https://www.mongodb.org/static/pgp/opsmanager-{manifest-version}.asc
      17
      51
      52: mongodb-mms-<version.arch>.rpm: rsa sha1 (md5) pgp md5 OK
      53

      6 source/includes/steps-verify-om-tar-gz-archive.yaml:
      15 replacement:
      16: keyfile: https://www.mongodb.org/static/pgp/opsmanager-{manifest-version}.asc
      17

      7 source/release-notes/changelogs/ops-manager/changelog-onprem-v5.0.rst:
      243
      244: - Signs |onprem| packages with PGP.
      245

      8 source/tutorial/verify-ops-manager-packages.txt:
      17 Before installing |mms|, validate the package using the provided
      18: |pgp| signature.
      19
      20: PGP signatures provide the strongest guarantees by checking both the
      21 authenticity and integrity of a file to prevent tampering.

      Below is the text from the original DOCS ticket:

      As part of BUILD-13242 we have migrated pgp keys to a new web address: https://pgp.mongodb.com/<key name>. While the old address (mongodb.org/static/pgp) will continue to work via redirect to the new location, we should begin encouraging users to use pgp.mongodb.com directly so that one day we can drop support for mongodb.org/static/pgp. There are a few places where I can see this endpoint was referenced, e.g. https://www.mongodb.com/docs/v5.0/tutorial/install-mongodb-on-ubuntu/. There are probably more references I haven't found. Each of these should be updated to reference pgp.mongodb.com.

      Let me know if you have any questions!

            Assignee:
            john.williams@mongodb.com John Williams
            Reporter:
            julia.malkin@mongodb.com Julia Malkin
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved:
              1 year, 23 weeks, 5 days ago