Windows docker image lacks mogosh and docker-entrypoint

[aneojgurhem]

Hello,

I need to use Windows docker image to deploy mongodb. However, it lacks mogosh binary and an entrypoint script compared to what is available for Linux. It is an issue for the following reasons:

• Mongosh unavailability prevents the implementation of docker health check as it requires to execute a command from the container. It also prevents the execution of some useful commands such as replication enabling and data insertion.
• The entrypoint provided in the Linux image is really convenient to set up a mongodb instance. Having it in Windows would save a lot of trouble.
• Entrypoint also take care of the execution of mongo file from /docker-entrypoint-initdb.d/. It is also quite helpful.

Mongosh would really help to have a properly set up mongodb instance with docker on Windows. Do you think it could be added in Windows images, just like for Linux ?

Thanks !

[tianon]

Regarding the entrypoint script, see https://github.com/docker-library/mongo/issues/291#issuecomment-410813034

Regarding mongosh, that's a good point -- I was hoping they'd add it to the standard server installer (at least as an optional component), but they have not done so. They do appear to publish installers specific to mongosh (https://www.mongodb.com/try/download/shell, https://github.com/mongodb-js/mongosh/releases, both .zip and .msi), but I can't seem to find any published checksums of those installers we could use to verify the downloads. :disappointed:

[aneojgurhem]

I understand for the entrypoint. That's a shame.

There is a PGP key associated to the zip file. Isn't that enough to validate that we got the right file ?

[yosifkit]

There is a PGP key associated to the zip file. Isn't that enough to validate that we got the right file ?

That'd be easily in Linux, but Windows doesn't have a default tool that could be installed in a trusted way to verify a PGP signature, so then we'd have to also download and verify a tool for that.

[tianon]

Also, a signature and a checksum solve different (related) problems -- one provides publisher identity verification while the other provides transport / "replacement" verification (or a clean cache bust if the file did need to be replaced/republished for a legitimate reason).

[aneojgurhem]

That's unfortunate. But I think it would be worth it to have mongosh on the windows image as it would save a lot of time.

By any chance, did you already ask the mongosh team for a checksum ?