-
Type: Task
-
Resolution: Unresolved
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: Release
-
None
-
Tools and Replicator
-
248
Once DEVPROD-2553 is complete, RPM files will no longer be signed directly (they were previously signed using the wrong key). They are currently distributed directly via the downloads page ( https://www.mongodb.com/try/download/database-tools ), but should no longer be distributed there.
The RPM and DEB files in their linux repos are safe due to existing protection measures that are enumerated here: https://docs.google.com/document/d/1KPF54aJYilaPtksfi0JbaP_eHAUecliItUmzD0sDU1k/edit#heading=h.vbzr1mn2rwx1
This ticket is to change the approach to distributing these files. If a user selects a Linux platform and either DEB or RPM, instead of having a Download button, there should instead be a Install via Documentation button that links to https://www.mongodb.com/docs/database-tools/installation/installation-linux/
Another change that will be necessary is to point the installation-linux documentation for "RPM Package" and "DEB Package" to the linux repos ( https://repo.mongodb.org/ ), instead of them pointing back to the downloads page.
This change will allow us to better conform to signing best practices in the database tools.