postgresql-17-src-make.yml

name: postgresql-17-src-make
on: [pull_request, workflow_dispatch]

permissions:
  contents: read

jobs:
  build:
    name: pg-17-src-make-test
    runs-on: ubuntu-22.04
    steps:


      - name: Remove old postgres
        run: |
          sudo apt purge postgresql-client-common postgresql-common \
            postgresql postgresql*
          sudo rm -rf /var/lib/postgresql /var/log/postgresql /etc/postgresql \
           /usr/lib/postgresql /usr/include/postgresql /usr/share/postgresql \
           /etc/postgresql
          sudo rm -f /usr/bin/pg_config

      - name: Install dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y libreadline6-dev systemtap-sdt-dev \
            zlib1g-dev libssl-dev libpam0g-dev bison flex \
            libipc-run-perl -y docbook-xsl docbook-xsl libxml2 libxml2-utils \
            libxml2-dev libxslt-dev xsltproc libkrb5-dev libldap2-dev \
            libsystemd-dev gettext tcl-dev libperl-dev pkg-config clang-11 \
            llvm-11 llvm-11-dev libselinux1-dev python3-dev \
            uuid-dev liblz4-dev libcurl4-openssl-dev libhttp-server-simple-perl python3-pykmip
          sudo /usr/bin/perl -MCPAN -e 'install IPC::Run'
          sudo /usr/bin/perl -MCPAN -e 'install Text::Trim'
          wget -O- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
          echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
          sudo apt update && sudo apt install -y vault

      - name: Clone postgres repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          repository: 'postgres/postgres'
          ref: 'REL_17_STABLE'
          path: 'src'

      - name: Clone pg_tde repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          path: 'src/contrib/pg_tde'
          
      - name: Checkout libkmip submodule
        run: |
          git submodule update --init --recursive
        working-directory: src/contrib/pg_tde

      - name: Create pgsql dir
        run: mkdir -p /opt/pgsql

      - name: Build postgres
        run: |
          ./configure --with-openssl --enable-tap-tests=no --enable-cassert
          make -j
          sudo make install
        working-directory: src

      - name: Build pg_tde
        run: |
          make -j MAJORVERSION=17
          sudo make install
        working-directory: src/contrib/pg_tde

      - name: Start postgresql cluster with pg_tde
        run: |
          export PATH="/usr/local/pgsql/bin:$PATH"
          sudo cp /usr/local/pgsql/bin/pg_config /usr/bin
          initdb -D /opt/pgsql/data
          echo "shared_preload_libraries = 'pg_tde'" >> \
            /opt/pgsql/data/postgresql.conf
          pg_ctl -D /opt/pgsql/data -l logfile start

      - name: Setup kmip 1
        run: |
          wget https://raw.githubusercontent.com/OpenKMIP/PyKMIP/refs/heads/master/bin/create_certificates.py
          python3 create_certificates.py
          cat client_certificate_jane_doe.pem >> client_key_jane_doe.pem
        working-directory: /tmp

      - name: Test pg_tde
        run: |
          TV=$(mktemp)
          { exec >$TV; vault server -dev; } &
          pykmip-server -f `pwd`/../contrib/pg_tde/pykmip-server.conf -l /tmp/kmip-server.log &
          sleep 10
          export ROOT_TOKEN=$(cat $TV | grep "Root Token" | cut -d ":" -f 2 | xargs echo -n)
          echo "Root token: $ROOT_TOKEN"
          make installcheck
        working-directory: src/contrib/pg_tde

      - name: Report on test fail
        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
        if: ${{ failure() }}
        with:
          name: Regressions diff and postgresql log
          path: |
            src/contrib/pg_tde/regression.diffs
            logfile
          retention-days: 3

      - name: Report on test fail 2
        if: ${{ failure() }}
        run: |
          cat src/contrib/pg_tde/regression.diffs