-
Type:
Spec Change
-
Resolution: Done
-
Priority:
Major - P3
-
None
-
Component/s: Evergreen Tools
-
None
-
Not Needed
Summary
The amazon2023 images ship gnupg2-minimal (gpg without gpg-agent), so signature verification of "latest" nightly downloads (DRIVERS-3650) fails and aborts every VERSION=latest task before any server starts. Skip the check on the affected platforms with a callout naming DEVPROD-44314, fail with an actionable error elsewhere, and remove the skip once the image ticket lands.
Motivation
Who is the affected end user?
Driver teams running VERSION=latest tasks, and this repo's CI.
How does this affect the end user?
All latest tasks on amazon2023 hosts fail with a confusing GPG error unrelated to the change under test.
How likely is it that this problem or use case will occur?
Certain on amazon2023 (both pinned images and the rolling image confirmed using rpm -q). It is an edge case for any future image with the same package split.
If the problem does occur, what are the consequences and how severe are they?
Outage of latest testing on affected hosts; with the fix, they run unverified with a loud callout, and any other broken host fails once with the fix in the message.
Is this issue urgent?
Yes — latest testing on amazon2023 is blocked; the skip should be removed promptly after DEVPROD-44314 lands.
Is this ticket required by a downstream team?
Yes — PyMongo's tests are failing CI on amazon2023 hosts at startup.
Is this ticket only for tests?
Mostly test/CI infrastructure plus a small mongodl fix; no driver-facing functional impact beyond unblocking latest.
Acceptance Criteria
- On amazon2023 targets, verification is skipped with a callout naming DEVPROD-44314; the download proceeds, no retries, no failure.
- On any other host with gpg but no working agent, the download fails once with an actionable error (install full gnupg2) — not 5 retries.
- Skipping elsewhere only via the explicit SERVER_ARTIFACTS_SKIP_SIGNATURE_VERIFICATION env var.
- amazon-2023-arm64 added to the os-requires-70 matrix.
- After DEVPROD-44314 is fixed and rolled out: remove the skip (one-line diff) and confirm verification runs on amazon2023 again.