ArangoDB building from source problems

[Mark Barinstein]

Hello.
We try to compile arangodb 3.11.8 from source using devel branch as suggested.
The outcome we see is as follows:

• No rpm / deb package
• the arangodb utility (ArangoDB Starter) is not compiled at least
• it seems that the installation script uses absolute paths sometimes, so it's not possible (or hard enough) to install the product on a server different from a build server

Questions:

• Why don't I see the arangodb utility and how to build it?
• Do we miss any other utilities if we build ArangoDB from source?
• Is there any way to prepare rpm / deb package? Is there any instruction on how to get it if so?

https://docs.arangodb.com/3.11/operations/installation/compiling/
https://github.com/arangodb/arangodb/tree/3.11.8
https://docs.arangodb.com/3.11/operations/installation/compiling/compile-on-debian/ (edited) 

[Asif Kazi]

Hi Mark,

We will have someone from our build / QA team engage with you to have you unblocked.

Thanks,

Asif

[Vadim Kondratev]

Hello Mark,

Let me please answer your questions:

• Why don't I see the arangodb utility and how to build it?

ArangoDB Starter is a separate component and could be compiled (or downloaded) separately: https://github.com/arangodb-helper/arangodb. Actual version which is included in particular ArangoDB package (of a selected arangodb/arangodb branch) is stated within `./VERSIONS` file.

• Do we miss any other utilities if we build ArangoDB from source?

• Is there any way to prepare rpm / deb package? Is there any instruction on how to get it if so?

In order to build packages (DEB, RPM, TAR.GZ) you can look into https://github.com/arangodb/oskar/ and pick those scripts you would like to use.  We use this tool to build ArangoDB packages but.

Best regards,
Vadim Kondratev

[Mark Barinstein]

Hello Asif, Vadim,
Thanks for the information.

Vadim,
Your last sentence in your message looks incomplete. You use this tool to build ArangoDB, but ... what? Is there any pitfall with this tool?

Best regards,
Mark.

среда, 10 апреля 2024 г. в 17:36:25 UTC+3, va...@arangodb.com:

[Vadim Kondratev]

Mark, sorry. It was an unnecessary partial copy-paste typo. The following sentence is full:  We use this tool to build ArangoDB packages but you need to adjust these scripts locally to build Community version only.

Best regards,
Vadim Kondratev.

[Mark Barinstein]

Hello.

Vadim, thanks for the information.

>ArangoDB Starter is a separate component and could be compiled (or downloaded) separately: https://github.com/arangodb-helper/arangodb. Actual version which is included in particular ArangoDB package (of a selected arangodb/arangodb branch) is stated within `./VERSIONS` file.

Is ArangoDB Starterd a cross-ArangoDB-version component?
In other words, do you include the latest version of ArangoDB Starter, say, in next fix of both 3.12 and 3.11?

My particular concern is:

arangodb included into the ArangoDB 3.11.8 package has a number of security vulnerabilities. It seems that all of them we are aware of should be addressed in v0.19.1.

The question is: will v0.19.1 be included in 3.11.9?

Regards,
Mark.

среда, 10 апреля 2024 г. в 19:00:08 UTC+3, va...@arangodb.com:

[Vadim Kondratev]

Hello.

Yes, Starter is a cross-ArangoDB-version component. However it has 2 branches: v0.18 for 3.11 and v0.19 for 3.12. Usually these are released altogether and then included into next ArangoDB release accordingly.

Best regards,
Vadim Kondratev.

[Mark Barinstein]

Hello.

Vadim,

I see, that arangodb v0.18.5 has been released, where all our revealed security problems were addressed.
Is there any rough ETA on upcoming 3.11.9 or may be 3.11.8.2, where this arangodb version at least and ansi-regex patch (https://github.com/arangodb/arangodb/issues/20830) will be included?

Regards,
Mark

четверг, 18 апреля 2024 г. в 17:26:42 UTC+3, va...@arangodb.com:

[Vadim Kondratev]

Hello Mark,

We still plan to add more bits to 3.11.9 so I can't give ETA right now. However, you can use 0.18.5 Starter with 3.11.8.

Best regards,

Vadim Kondratev.