Package Details: mongodb44 4.4.31-1

Git Clone URL: https://aur.archlinux.org/mongodb44.git (read-only, click to copy)
Package Base: mongodb44
Description: A high-performance, open source, schema-free document-oriented database (last version to support non-avx CPUs)
Upstream URL: https://www.mongodb.com/
Licenses: Apache, custom:SSPL1
Conflicts: mongodb
Provides: mongodb
Submitter: JstKddng
Maintainer: drankinatty
Last Packager: drankinatty
Votes: 3
Popularity: 0.000001
First Submitted: 2022-08-03 19:21 (UTC)
Last Updated: 2026-08-27 06:21 (UTC)

Dependencies (15)

Required by (18)

Sources (20)

Pinned Comments

drankinatty commented on 2026-08-21 02:46 (UTC) (edited on 2026-08-27 07:00 (UTC) by drankinatty)

Boost 1.91 -> 1.92, Updated to mongodb-4.4.31, mongobleed patched upstream

There should be no impact from the backmp11 breaking changes in the boost update. I've grepped the source and the process_event, process_queued_events, and process_single_queued_event do not appear in the code. So at most a rebuild against boost-1.92 to pick up the new so version is all that should be required.

Note: patch for SConstruct required due to change to pkg_resources.

Thanks to Lone Wolf and loqs in my forum thread for help figuring out how to handle the changes to scons pkg_resources in SConstruct. We again have a fully functional and clean building mongodb44 package updated to the latest upstream source. Added mongodb-4.4.31-scons-pkg_resources.patch

Note: the mongobleed vulnerability in its zlib compressed header code that allowed unauthenticated users to leak uninitialized heap memory from the database was fixed in 4.4.30.

Also note, with the latest kernel and gcc-16, this package will no longer build on boxes with 4G of RAM with LTO enabled (ld terminated with signal 9 [killed], cc1plus invoked oom-killer). I did not try building without LTO, I just moved to another box.

Latest Comments

1 2 Next › Last »

drankinatty commented on 2026-08-21 02:46 (UTC) (edited on 2026-08-27 07:00 (UTC) by drankinatty)

Boost 1.91 -> 1.92, Updated to mongodb-4.4.31, mongobleed patched upstream

There should be no impact from the backmp11 breaking changes in the boost update. I've grepped the source and the process_event, process_queued_events, and process_single_queued_event do not appear in the code. So at most a rebuild against boost-1.92 to pick up the new so version is all that should be required.

Note: patch for SConstruct required due to change to pkg_resources.

Thanks to Lone Wolf and loqs in my forum thread for help figuring out how to handle the changes to scons pkg_resources in SConstruct. We again have a fully functional and clean building mongodb44 package updated to the latest upstream source. Added mongodb-4.4.31-scons-pkg_resources.patch

Note: the mongobleed vulnerability in its zlib compressed header code that allowed unauthenticated users to leak uninitialized heap memory from the database was fixed in 4.4.30.

Also note, with the latest kernel and gcc-16, this package will no longer build on boxes with 4G of RAM with LTO enabled (ld terminated with signal 9 [killed], cc1plus invoked oom-killer). I did not try building without LTO, I just moved to another box.

drankinatty commented on 2026-07-12 00:40 (UTC) (edited on 2026-07-19 08:36 (UTC) by drankinatty)

Add mongodb to logrotate

This package does not set up logrotate for mongodb. I was surprised when an IP change sent me looking at the log, only to find a 362M mongod.log. You will want to create a drop-in for mongodb in /etc/logrotate/logrotate.d. See the Archwiki - logrotate I simply used:

/var/log/mongodb/mongod.log {
  rotate 5
  sized 2M
  missingok
  notifempty
  copytruncate
}

Adjust as needed. The log grows fairly rapidly due to logging in json format.

drankinatty commented on 2026-04-26 08:20 (UTC) (edited on 2026-04-27 05:46 (UTC) by drankinatty)

Updated for boost 1.90 -> 1.91

A patch was required due to the 1.90 - 1.91 boost version change. The boost update moved macros around merging static_assert into config. A trivial header patch to include boost/static_assert.hpp fixes this issue.

The update also broke compilation due to boost::optional changes. Thanks to Seth's help in the discussion boost 1.91 broke mongodb44 build - need C++ help to properly fix the boost::optional build failure, a simple change fixed the issue at src/mongo/db/catalog/coll_mod.cpp:361.

Added 015-mongodb-4.4.29-boost-1.91.patch.

drankinatty commented on 2026-04-20 06:30 (UTC) (edited on 2026-04-20 08:43 (UTC) by drankinatty)

yaml-cpp Update 0.8 -> 0.9 Requires rebuild

After update of yaml-cpp from the current 0.8.0-3 to 0.9.0-1 a rebuild is required due to the shared library soname bump.

(Note, you can also downgrade to yaml-cpp-0.8.0-3 to restore mongodb44 until the chroot rebuild is complete)

drankinatty commented on 2026-03-30 07:37 (UTC)

Boost 1.89 -> 1.90

Thankfully, there was no breakage caused by the boost 1.89->1.90 version update. All that is needed is a rebuild to link against the new boost library.

drankinatty commented on 2025-12-31 20:31 (UTC)

WARNING, on December 15, an exploit was discovered in MongoDB zlib compressed headers:

##
# CVE-2025-14847
# https://www.cve.org/CVERecord?id=CVE-2025-14847
#
# MongoBleed zlib vulnerability - remove zlib compression
# https://www.theregister.com/2025/12/30/mongodb_vuln_exploited_cve_2025_14847/
#  --use-system-zlib
#

zlib compression should be disabled in all versions that cannot upgrade to the new version of MongoDB. For MongoDB44, that means zlib compressed headers will be disabled going forward.

drankinatty commented on 2025-10-22 13:05 (UTC) (edited on 2025-10-25 04:31 (UTC) by drankinatty)

boost and boost-libs ver. 1.89 removed libboost_system upstream. A patch was added to remove Scons references to libboost_system and the package simply needs to be rebuilt against the new boost packages. Additional patch added to suppress -Wsign-compare and -Wlto-type-mismatch warnings. All patches renamed with numeric prefix to ensure patch order as the number of patches increase - working fine, no other changes.

drankinatty commented on 2025-05-07 03:30 (UTC) (edited on 2025-05-07 03:32 (UTC) by drankinatty)

Note: after update to boost-1.88.0-2-x86_64, a package rebuild is required, however this will fail due to gcc-15. Patch Done! The package builds and runs fine with gcc-15 and boost-88. TODO add -Wno-sign-compare to CFLAGS and add -Wno-odr to CXXFLAGS for moz.js warnings. (next time)

drankinatty commented on 2025-02-08 08:15 (UTC) (edited on 2025-05-07 03:30 (UTC) by drankinatty)

Note: after update of boost-1.87.0-2-x86_64, a rebuild of the package is required. Additionally, the -Wstringop-overread and -Wstringop-overflow= options now flag about a dozen new warnings along with a few sign-compare and loop variables that should be references.

On fresh rebuild, installed size is reduced by 61M and mongodb idle CPU use is reduced significantly to ~0.3% every few seconds.

Updated to add mongodb-4.4.29-boost-1.87+stdmove.patch resolving all new warnings for non-reference used with range-based-for loops creating copy and removal of final redundant std::move() on function return.

danielkr commented on 2025-02-01 11:12 (UTC)

Replacing line #2292 in src/mongo-r4.4.29/SConstruct with: env.Append( CCFLAGS=['-march=armv8-a+crc', '-mtune=cortex-a72']) will make it compile and runnable on a raspberry PI (tested on 4 but should work on others as well). Make sure to run with makepkg -e so it does not unpack and overwrite your changes.

1 2 Next › Last »