|
| 1 | +{ self, pkgs }: |
| 2 | +let |
| 3 | + pname = "pgaudit"; |
| 4 | + inherit (pkgs) lib; |
| 5 | + installedExtension = |
| 6 | + postgresMajorVersion: self.packages.${pkgs.system}."psql_${postgresMajorVersion}/exts/${pname}-all"; |
| 7 | + versions = postgresqlMajorVersion: (installedExtension postgresqlMajorVersion).versions; |
| 8 | + postgresqlWithExtension = |
| 9 | + postgresql: |
| 10 | + let |
| 11 | + majorVersion = lib.versions.major postgresql.version; |
| 12 | + pkg = pkgs.buildEnv { |
| 13 | + name = "postgresql-${majorVersion}-${pname}"; |
| 14 | + paths = [ |
| 15 | + postgresql |
| 16 | + postgresql.lib |
| 17 | + (installedExtension majorVersion) |
| 18 | + ]; |
| 19 | + passthru = { |
| 20 | + inherit (postgresql) version psqlSchema; |
| 21 | + lib = pkg; |
| 22 | + withPackages = _: pkg; |
| 23 | + }; |
| 24 | + nativeBuildInputs = [ pkgs.makeWrapper ]; |
| 25 | + pathsToLink = [ |
| 26 | + "/" |
| 27 | + "/bin" |
| 28 | + "/lib" |
| 29 | + ]; |
| 30 | + postBuild = '' |
| 31 | + wrapProgram $out/bin/postgres --set NIX_PGLIBDIR $out/lib |
| 32 | + wrapProgram $out/bin/pg_ctl --set NIX_PGLIBDIR $out/lib |
| 33 | + wrapProgram $out/bin/pg_upgrade --set NIX_PGLIBDIR $out/lib |
| 34 | + ''; |
| 35 | + }; |
| 36 | + in |
| 37 | + pkg; |
| 38 | +in |
| 39 | +self.inputs.nixpkgs.lib.nixos.runTest { |
| 40 | + name = pname; |
| 41 | + hostPkgs = pkgs; |
| 42 | + nodes.server = |
| 43 | + { config, ... }: |
| 44 | + { |
| 45 | + virtualisation = { |
| 46 | + forwardPorts = [ |
| 47 | + { |
| 48 | + from = "host"; |
| 49 | + host.port = 13022; |
| 50 | + guest.port = 22; |
| 51 | + } |
| 52 | + ]; |
| 53 | + }; |
| 54 | + services.openssh = { |
| 55 | + enable = true; |
| 56 | + }; |
| 57 | + users.users.root.openssh.authorizedKeys.keys = [ |
| 58 | + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIo+ulCUfJjnCVgfM4946Ih5Nm8DeZZiayYeABHGPEl7 jfroche" |
| 59 | + ]; |
| 60 | + |
| 61 | + services.postgresql = { |
| 62 | + enable = true; |
| 63 | + package = postgresqlWithExtension self.packages.${pkgs.system}.postgresql_15; |
| 64 | + settings = { |
| 65 | + "shared_preload_libraries" = pname; |
| 66 | + }; |
| 67 | + }; |
| 68 | + |
| 69 | + specialisation.postgresql17.configuration = { |
| 70 | + services.postgresql = { |
| 71 | + package = lib.mkForce (postgresqlWithExtension self.packages.${pkgs.system}.postgresql_17); |
| 72 | + }; |
| 73 | + |
| 74 | + systemd.services.postgresql-migrate = { |
| 75 | + serviceConfig = { |
| 76 | + Type = "oneshot"; |
| 77 | + RemainAfterExit = true; |
| 78 | + User = "postgres"; |
| 79 | + Group = "postgres"; |
| 80 | + StateDirectory = "postgresql"; |
| 81 | + WorkingDirectory = "${builtins.dirOf config.services.postgresql.dataDir}"; |
| 82 | + }; |
| 83 | + script = |
| 84 | + let |
| 85 | + oldPostgresql = postgresqlWithExtension self.packages.${pkgs.system}.postgresql_15; |
| 86 | + newPostgresql = postgresqlWithExtension self.packages.${pkgs.system}.postgresql_17; |
| 87 | + oldDataDir = "${builtins.dirOf config.services.postgresql.dataDir}/${oldPostgresql.psqlSchema}"; |
| 88 | + newDataDir = "${builtins.dirOf config.services.postgresql.dataDir}/${newPostgresql.psqlSchema}"; |
| 89 | + in |
| 90 | + '' |
| 91 | + if [[ ! -d ${newDataDir} ]]; then |
| 92 | + install -d -m 0700 -o postgres -g postgres "${newDataDir}" |
| 93 | + ${newPostgresql}/bin/initdb -D "${newDataDir}" |
| 94 | + echo "shared_preload_libraries = '${pname}'" >> "${newDataDir}/postgresql.conf" |
| 95 | + ${newPostgresql}/bin/pg_upgrade --old-datadir "${oldDataDir}" --new-datadir "${newDataDir}" \ |
| 96 | + --old-bindir "${oldPostgresql}/bin" --new-bindir "${newPostgresql}/bin" |
| 97 | + else |
| 98 | + echo "${newDataDir} already exists" |
| 99 | + fi |
| 100 | + ''; |
| 101 | + }; |
| 102 | + |
| 103 | + systemd.services.postgresql = { |
| 104 | + after = [ "postgresql-migrate.service" ]; |
| 105 | + requires = [ "postgresql-migrate.service" ]; |
| 106 | + }; |
| 107 | + }; |
| 108 | + |
| 109 | + }; |
| 110 | + testScript = |
| 111 | + { nodes, ... }: |
| 112 | + let |
| 113 | + pg17-configuration = "${nodes.server.system.build.toplevel}/specialisation/postgresql17"; |
| 114 | + in |
| 115 | + '' |
| 116 | + versions = { |
| 117 | + "15": [${lib.concatStringsSep ", " (map (s: ''"${s}"'') (versions "15"))}], |
| 118 | + "17": [${lib.concatStringsSep ", " (map (s: ''"${s}"'') (versions "17"))}], |
| 119 | + } |
| 120 | +
|
| 121 | + def run_sql(query): |
| 122 | + return server.succeed(f"""sudo -u postgres psql -t -A -F\",\" -c \"{query}\" """).strip() |
| 123 | +
|
| 124 | + def check_upgrade_path(pg_version): |
| 125 | + with subtest("Check ${pname} upgrade path"): |
| 126 | + firstVersion = versions[pg_version][0] |
| 127 | + server.succeed("sudo -u postgres psql -c 'DROP EXTENSION IF EXISTS ${pname};'") |
| 128 | + run_sql(f"""CREATE EXTENSION ${pname} WITH VERSION '{firstVersion}';""") |
| 129 | + installed_version = run_sql(r"""SELECT extversion FROM pg_extension WHERE extname = '${pname}';""") |
| 130 | + assert installed_version == firstVersion, f"Expected ${pname} version {firstVersion}, but found {installed_version}" |
| 131 | + for version in versions[pg_version][1:]: |
| 132 | + run_sql(f"""ALTER EXTENSION ${pname} UPDATE TO '{version}';""") |
| 133 | + installed_version = run_sql(r"""SELECT extversion FROM pg_extension WHERE extname = '${pname}';""") |
| 134 | + assert installed_version == version, f"Expected ${pname} version {version}, but found {installed_version}" |
| 135 | +
|
| 136 | + start_all() |
| 137 | +
|
| 138 | + server.wait_for_unit("multi-user.target") |
| 139 | + server.wait_for_unit("postgresql.service") |
| 140 | +
|
| 141 | + check_upgrade_path("15") |
| 142 | +
|
| 143 | + with subtest("Check ${pname} latest extension version"): |
| 144 | + server.succeed("sudo -u postgres psql -c 'DROP EXTENSION ${pname};'") |
| 145 | + server.succeed("sudo -u postgres psql -c 'CREATE EXTENSION ${pname};'") |
| 146 | + installed_extensions=run_sql(r"""SELECT extname, extversion FROM pg_extension;""") |
| 147 | + latestVersion = versions["15"][-1] |
| 148 | + assert f"${pname},{latestVersion}" in installed_extensions |
| 149 | +
|
| 150 | + with subtest("switch to postgresql 17"): |
| 151 | + server.succeed( |
| 152 | + "${pg17-configuration}/bin/switch-to-configuration test >&2" |
| 153 | + ) |
| 154 | +
|
| 155 | + # cannot upgrade pgaudit from 15 to 17 |
| 156 | + # with subtest("Check ${pname} latest extension version"): |
| 157 | + # installed_extensions=run_sql(r"""SELECT extname, extversion FROM pg_extension;""") |
| 158 | + # latestVersion = versions["17"][-1] |
| 159 | + # assert f"${pname},{latestVersion}" in installed_extensions |
| 160 | +
|
| 161 | + check_upgrade_path("17") |
| 162 | + ''; |
| 163 | +} |
0 commit comments