Interim plan to move away from the mongo tarball

[James Page]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 09/04/13 16:18, Mark Ramm wrote:
>> The agreed version of MongoDB (currently 2.2.3) will be
>> backported to precise and quantal; its still not in main so fixes
>> right now would be driven through the Ubuntu server team (rather
>> than from security team for example) - but they should be fixes,
>> not upgrades :-).  I'm hoping that for 13.10 we can get mongodb
>> into main so you get the full distro security support for this
>> package (I really hate the embedded spidermonkey library but this
>> is not the default in 2.4 so this is what I think is the trigger
>> point for main inclusion).
>> 
> 
> What is the status on 2.2.3 in precise and quantal?  Right now we
> are thinking about adding it to the Juju PPA for those versions,
> and enabling that PPA (just for for state servers), so that for
> those using the ~juju PPA get a working Juju.

I uploaded 2.2.4 to raring (security fix + another couple of minor
issues) on Friday; so I think that we are now in a position to request
the backports to precise and quantal.  Note that mongodb in raring
does now include SSL support.

> I think this will let us support those users (who will need a PPA 
> anyway) in the short term, and buy us a little time to do this "the
> best way" when we have agreement there.
> 
> Is there anything we should be doing this week to make sure we're
> not painting ourselves in a corner?  James, what's your advice?

Using a PPA while the backporting happens is fine; you can always
delete the packages from the PPA once they have landed in backports
and switch everyone to the backport version instead.


- -- 
James Page
Technical Lead
Ubuntu Server Team
james.page at canonical.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=oFw2
-----END PGP SIGNATURE-----