MongoDB 검색 출시하다 팀 모든 소프트웨어 패키지에 디지털 서명을 하여 특정 mongot 패키지 유효하고 변경되지 않은 mongot 출시하다 증명합니다. mongot를 설치하기 전에 컨테이너 이미지 또는 tarball의 유효성을 검사해야 합니다.
Docker 컨테이너 이미지 확인
컨테이너 이미지 확인
Replace {VERSION_NUMBER} with the version of mongot that you downloaded from the MongoDB Search in Community Download Center and run the following command to verify the container image:
COSIGN_REPOSITORY=docker.io/mongodb/signatures cosign verify --private-infrastructure --key=./mongodb-search-community.pem "docker.io/mongodb/mongodb-community-search:{VERSION_NUMBER}"
출력은 다음과 유사해야 합니다.
Verification for index.docker.io/mongodb/mongodb-community-search:latest -- The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key [{"critical":{"identity":{"docker-reference":"docker.io/mongodb/mongodb-community-search:latest"}, "image":{"docker-manifest-digest":"sha256:b41f73a33aa62a62596b6aeaf4c177e47dc3a5901701f6d8d46f498a45f7ac53"}, "type":"cosign container image signature"},"optional":null}]
Tarball 확인
tarball 서명 다운로드
Replace {VERSION_NUMBER} with the version of mongot that you downloaded from the MongoDB Search in Community Download Center and run the following command to download the tarball signature for the system architecture and version.
wget https://downloads.mongodb.org/mongodb-search-community/{VERSION_NUMBER}/mongot_community_{VERSION_NUMBER}_linux_aarch64.tgz.sig
wget https://downloads.mongodb.org/mongodb-search-community/{VERSION_NUMBER}/mongot_community_{VERSION_NUMBER}_linux_x86_64.tgz.sig
다른 버전을 다운로드 하려면 {VERSION_NUMBER} 인스턴스를 원하는 버전 번호로 바꿉니다.
tarball 다운로드
Download the MongoDB Search in Community tarball from the MongoDB Download Center.
타볼 확인
Replace {VERSION_NUMBER} with your version of mongot and run the following command to verify the tarball:
gpg --verify mongot_community_{VERSION_NUMBER}_linux_aarch64.tgz.sig mongot_community_{VERSION_NUMBER}_linux_aarch64.tgz
gpg --verify mongot_community_{VERSION_NUMBER}_linux_x86_64.tgz.sig mongot_community_{VERSION_NUMBER}_linux_x86_64.tgz
다른 버전을 확인하려면 {VERSION_NUMBER} 인스턴스를 원하는 버전 번호로 바꿉니다.
출력은 다음과 유사해야 합니다.
gpg: Signature made Fri Sep 5 15:37:47 2025 PDT gpg: using RSA key 55C58636FD6CEE2B789B6F49516C2412904B6C26 gpg: Good signature from "MongoDB Atlas Search Release Signing Key <packaging@mongodb.com>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 55C5 8636 FD6C EE2B 789B 6F49 516C 2412 904B 6C26