How to build mongo-tools from source code?

[Stennie_X (Stennie)]

@satya_dommeti

We are building tools for security purposes and client wants to use source version in production.

Please let me know if there is any issues with source code.

Hi @satya_dommeti,

You mentioned a similar requirement for building the server from source. I will reiterate my comment on that discussion since it also applies here:

@Stennie_X

I noticed you are building MongoDB 4.2.3. The latest 4.2 release is currently 4.2.8 (see MongoDB 4.2 Minor Releases). I strongly recommend staying current with minor releases for the latest security and stability fixes.

If your client is concerned about security and stability, the official packages should provide more assurance on that front than building from source. All builds are extensively tested via our public (and open source) Evergreen CI and published packages are signed for verification.

If you build from source, there may be variations in your build environment that cause unexpected issues.

It is fine if you prefer to build from source, but typically the motivation for doing so would be to make alterations or build for an unsupported platform. If security is a key concern, you should also keep up with the latest minor releases.

Regards,
Stennie