open-dsi
/
postgres
mirror of https://github.com/postgres/postgres
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
60422 Commits
38 Branches
662 Tags
735 MiB
Tag: Branch: Tree: 2dbb8d8e29
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '2dbb8d8e29'
${ noResults }
postgres/ci_scripts/setup-keyring-servers.sh

26 lines
720 B
Raw Normal View History Unescape

CI updata 1: percona server for postgresql basic build and test This action is similar to what we had before, executin tests on Ubuntu 22.04 with both meson and make, all tests passing. The test is refactored to easily support other configurations, but those are not part of this commit yet because of failures. Oters will be added in separate commits with required script/code changes. The commit also contains a compilation / possibly bug fix reported by newer GCC versions
8 months ago
#!/bin/bash
Make whitespace of CI scripts consistent
8 months ago
SCRIPT_DIR="$(cd -- "$(dirname "$0")" >/dev/null 2>&1; pwd -P)"
CI updata 1: percona server for postgresql basic build and test This action is similar to what we had before, executin tests on Ubuntu 22.04 with both meson and make, all tests passing. The test is refactored to easily support other configurations, but those are not part of this commit yet because of failures. Oters will be added in separate commits with required script/code changes. The commit also contains a compilation / possibly bug fix reported by newer GCC versions
8 months ago
cd /tmp
wget https://raw.githubusercontent.com/OpenKMIP/PyKMIP/refs/heads/master/bin/create_certificates.py
python3 create_certificates.py
mkdir policies
cd policies
wget https://raw.githubusercontent.com/OpenKMIP/PyKMIP/refs/heads/master/examples/policy.json
cd ..
echo $SCRIPT_DIR
pykmip-server -f "$SCRIPT_DIR/../contrib/pg_tde/pykmip-server.conf" -l /tmp/kmip-server.log &
TV=$(mktemp)
{ exec >$TV; vault server -dev; } &
sleep 10
PG-1002: WAL encryption requires explicit configuration (#36) Instead of automatically creating a default keyring, from now on we require users to expicitly create a WAL key. Most of these steps were required even without change anyway, as the default configuration was highly unsecore. This eliminates the possiblity of users forgetting to change the unsecure default, ending up with an encryption that doesn't work in practice. The required steps are outlined in the new tap test, that tries to enable wal encryption: * Enable the extension in at least one database * Create a global key provider * Create a global principal key * Create the WAL key using the new `pg_tde_create_wal_key()` function * Set `pg_tde.wal_encrypt = 1` in the conf file or with `ALTER SYSTEM` * Restart the server Setting the GUC variable to ON without the previous steps results in the startup failing with an error message explaining the requirements.
8 months ago
export ROOT_TOKEN=$(cat $TV | grep "Root Token" | cut -d ":" -f 2 | xargs echo -n)
echo "export ROOT_TOKEN=$ROOT_TOKEN"
if [ -v GITHUB_ACTIONS ]; then
Make whitespace of CI scripts consistent
8 months ago
echo "ROOT_TOKEN=$ROOT_TOKEN" >> $GITHUB_ENV
PG-1002: WAL encryption requires explicit configuration (#36) Instead of automatically creating a default keyring, from now on we require users to expicitly create a WAL key. Most of these steps were required even without change anyway, as the default configuration was highly unsecore. This eliminates the possiblity of users forgetting to change the unsecure default, ending up with an encryption that doesn't work in practice. The required steps are outlined in the new tap test, that tries to enable wal encryption: * Enable the extension in at least one database * Create a global key provider * Create a global principal key * Create the WAL key using the new `pg_tde_create_wal_key()` function * Set `pg_tde.wal_encrypt = 1` in the conf file or with `ALTER SYSTEM` * Restart the server Setting the GUC variable to ON without the previous steps results in the startup failing with an error message explaining the requirements.
8 months ago
fi