MongoDB Client-Side Field Level Encryption with ASP.NET core C# in docker on ARM64

Heinrich_Grobler · 2025-04-03T16:15:39.216Z

I am trying to setup CSFLE in docker for our Dotnet application in such a way that it can run on both Windows and Mac (ARM64) machines, We are currently using the mongocryptd approach and do not mind moving over to the Automatic Encryption Shared Library approach as highlighted in another community post

The main problem is that dotnet’s Microsoft recommended images run on the Debian distribution of Linux, Debian 12 (Bookworm), to be specific, since we are on .NET 8.

Based on all the details that I could find, neither the mongocryptd nor the Automatic Encryption Shared Library supports Arm64 architecture on the Debian distribution. Please correct me if I am wrong, I used this as a reference

Just some extra context, our current Docker file is downloading the mongocryptd using the following:

RUN wget -qO - https://www.mongodb.org/static/pgp/server-7.0.asc | \
    gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg
RUN echo "deb [ signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg ] http://repo.mongodb.com/apt/debian bookworm/mongodb-enterprise/7.0 main" | sudo tee /etc/apt/sources.list.d/mongodb-enterprise.list
RUN apt-get update && apt-get install -y mongodb-enterprise-cryptd

The above does not work on the MacBook with the ARM64 processor, giving the following error when running in our Docker File

Unable to locate package mongodb-enterprise-cryptd

Please let me know if there is any context that is missing

Rishit_Bhatia · 2025-04-04T15:24:59.242Z

Hi @Heinrich_Grobler,

Welcome to the MongoDB Community Forums! The crypt_shared andmongocryptd only support the same hardware as our Server releases. The crypt_shared library is mostly portable between different Linux distros. So depending on the version of Debian being targeted, any crypt_shared library built for a Linux distro with an older or equal glibc version should work fine. E.g For MongoDB 8.0, the oldest supported Linux on arm64 is RHEL8 and its crypt_shared package should also work on Debian.

Please note that the crypt_shared library is available for Atlas and Enterprise Advanced only, not for Community.

Hope that helps.

Thanks,

Rishit.

Joel_Odom · 2025-04-07T13:09:20.927Z

By the way, here is the latest version of the platform support matrix (you linked to an older version).

Heinrich_Grobler · 2025-04-08T09:13:31.875Z

Hi Rishit,

Thank you for the feedback, I will take a look and see if I can modify our docker files to install the RHEL8 version of crypt_shared instead